The open source offensive security agent

AI-powered penetration testing. Free models included or connect any provider including Claude, GPT, Gemini, and local models via Ollama.

Machines Solved

Autonomous penetration testing in action. Each machine below was compromised by OpenSploit with zero human intervention.

What is OpenSploit?

• [*]Phase-based methodology — Systematic approach through Reconnaissance, Enumeration, Exploitation, Post-Exploitation, and Reporting
• [*]25+ security tools — nmap, sqlmap, ffuf, hydra, nuclei, metasploit, and more via MCP containers
• [*]Intelligent tool discovery — Tool Registry RAG automatically finds the right tool for each task
• [*]Local-first architecture — Your targets, findings, and session data never leave your machine
• [*]On-demand containers — Tools download only when needed, minimizing disk usage
• [*]75+ LLM providers — Run locally with Ollama or connect Claude, GPT, Gemini, and more

Privacy First

OpenSploit runs entirely on your machine. Your targets, findings, and session data never leave your system unless you explicitly choose to share them. No telemetry, no cloud dependencies for core functionality.

Frequently Asked Questions

Stay Updated

Get notified about new releases, security advisories, and guides.