PentesterFlow

Open-source human-in-the-loop agentic AI command-line tool for penetration testers and bug bounty hunters. It connects to local or hosted LLMs, plans against a scoped target, runs real security tools with per-action approval, and produces evidence-backed findings with reproducible PoCs. Ships with built-in web testing skills (IDOR, SSRF, JWT, GraphQL, SSTI), Burp Suite import/export and persistent cross-session memory.