CyberStrike

English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português (Brasil) | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt | हिन्दी

The first open-source AI agent built for offensive security.

Automated penetration testing from your terminal — plug in your Claude, GPT, or any LLM subscription
and turn it into an autonomous red team agent with 13+ specialized agents, 7,600+ security skills, and 120+ OWASP test cases.
150+ AI providers • 5,300+ models • 56+ built-in tools • 176+ MCP tools

Quick Start • Intelligence Layer • What Makes It Different • Agents • Skills • Web UI • Bolt • MCP Ecosystem • Post-Exploitation • Installation • Docs • Website

--- ### Quick Start ```bash npm i -g @cyberstrike-io/cyberstrike@latest && cyberstrike ``` That's it. CyberStrike launches a TUI in your terminal, asks for your LLM provider and API key on first run, and you're ready to go. Tell it what to test — it handles reconnaissance, vulnerability discovery, exploitation, and reporting autonomously. > **Already have a Claude Code or OpenAI subscription?** CyberStrike's intelligence layer sits on top of your existing AI subscription. No separate API costs — your current plan powers an entire pentest toolkit. Explore the full documentation at **[docs.cyberstrike.io](https://docs.cyberstrike.io)** or visit **[cyberstrike.io](https://cyberstrike.io)** for demos and guides. --- ### Intelligence Layer CyberStrike isn't just a wrapper around an LLM. It's an intelligence layer that transforms any AI model into an offensive security specialist. **How it works:** When you connect your LLM provider, CyberStrike injects domain-specific context — OWASP testing methodology, vulnerability patterns, attack chain reasoning, and tool orchestration logic — into every interaction. The model doesn't need to know security; CyberStrike teaches it. **What the intelligence layer provides:** - **Schema normalization** — Structured output from any provider, regardless of response format differences - **Context guard** — Prevents prompt leakage and keeps the agent focused on the current test phase - **Provider auto-detection** — Automatically identifies your LLM endpoint and configures the optimal transport - **Tool orchestration** — Chains security tools intelligently based on findings, not fixed scripts **150+ AI providers and 5,300+ models supported out of the box:** CyberStrike integrates with the entire AI ecosystem through 23 bundled SDK providers and 150+ providers via the [models.dev](https://models.dev) catalog. Here are the core integrations: | Provider | Models | Notes | | ------------------------- | ------------------------ | --------------------------------------- | | **Anthropic** | Claude 4.5, Claude 4 | Best performance with extended thinking | | **OpenAI** | GPT-5, GPT-4.1, o3, o4 | Full tool-use + reasoning support | | **Google** | Gemini 2.5 Pro/Flash | Long context for large codebases | | **Amazon Bedrock** | All Bedrock models | IAM auth, no API keys needed | | **Azure OpenAI** | All Azure-hosted models | Enterprise deployments | | **Google Vertex AI** | Gemini + Claude on GCP | Regional endpoints (EU/US) | | **GitHub Copilot** | GPT-5, Claude, Gemini | Use your existing Copilot subscription | | **xAI** | Grok 3, Grok 3 Mini | Real-time data access | | **Groq** | LLaMA, Mixtral | Ultra-fast inference | | **Mistral** | Mistral Large, Codestral | European data residency | | **DeepSeek** | DeepSeek V3, R1 | Cost-effective alternative | | **Cerebras** | LLaMA on Cerebras | Fastest inference available | | **Cohere** | Command R+ | RAG-optimized models | | **OpenRouter** | 300+ models | Single API, any model | | **Together AI** | Open-source models | Fine-tuning support | | **DeepInfra** | Open-source models | Pay-per-token, no GPU needed | | **Perplexity** | Sonar models | Search-augmented generation | | **Alibaba Cloud** | Qwen, Kimi, DashScope | Chinese model ecosystem | | **Cloudflare AI Gateway** | Any provider via gateway | Caching, rate limiting, analytics | | **Ollama** | Any GGUF model | Fully offline, local-only | | **LM Studio** | Any local model | Desktop GUI + API server | | **vLLM** | Any HuggingFace model | Self-hosted, GPU-optimized | | **Any OpenAI-compatible** | — | Custom endpoints welcome | > **Air-gapped environments?** Run CyberStrike entirely offline with Ollama or LM Studio. No data leaves your machine — ever. --- ### What Makes It Different **Specialized Security Agents, Not Generic Chat** CyberStrike ships with 13+ agents purpose-built for security domains. Each agent carries domain-specific methodology, tool knowledge, and testing patterns. The web-application agent follows OWASP WSTG. The cloud-security agent knows CIS benchmarks. The mobile agent uses Frida and follows MASTG/MASVS. They don't guess — they follow proven offensive security frameworks. **Intelligence Layer, Not Just an LLM Wrapper** Most AI security tools are thin wrappers that send your prompt to an API. CyberStrike's intelligence layer normalizes outputs across 150+ providers and 5,300+ models, guards context between test phases, auto-detects your provider configuration, and orchestrates multi-step attack chains. The result: consistent, methodology-driven pentesting regardless of which model you use. **150+ Providers, Zero Lock-in** Anthropic, OpenAI, Google, Amazon Bedrock, Azure, Groq, Mistral, xAI, DeepSeek, Cerebras, Cohere, OpenRouter, Together AI, GitHub Copilot — or run fully offline with Ollama and LM Studio. 150+ providers, 5,300+ models. You choose the model. You own the results. As AI models get better and cheaper, CyberStrike gets better with them. Switch providers in seconds without reconfiguring anything. **Remote Tool Execution with Bolt** Your security tools don't have to run on your laptop. Deploy Bolt on one or many remote servers, pair with Ed25519 keys, and control everything from your local terminal. One CyberStrike instance can orchestrate dozens of Bolt servers — each with its own toolkit, network position, and attack surface access. --- ### Agents Switch between agents with `Tab`. Each one is a domain specialist. | Agent | Focus | What It Does | | ---------------------- | ------- | ------------------------------------------------------------------- | | **cyberstrike** | General | Full-access primary agent — reconnaissance, exploitation, reporting | | **web-application** | Web | OWASP Top 10, WSTG methodology, API security, session testing | | **mobile-application** | Mobile | Android/iOS, Frida/Objection, MASTG/MASVS compliance | | **cloud-security** | Cloud | AWS, Azure, GCP — IAM misconfigs, CIS benchmarks, exposed resources | | **internal-network** | Network | Active Directory, Kerberos attacks, lateral movement, pivoting | Plus **8 specialized proxy testers** that run automatically on intercepted traffic: | Tester | What It Tests | | ------------------------ | ---------------------------------------------------------------------------- | | **IDOR** | Object-level access control — can user A reach user B's resources? | | **Authorization Bypass** | Vertical privilege escalation — can low-privilege users hit admin endpoints? | | **Mass Assignment** | Unexpected writable fields — role, price, balance, userId in request bodies | | **Injection** | SQL, command, LDAP, template injection across all input vectors | | **Authentication** | Token validation, session fixation, credential exposure | | **Business Logic** | Price manipulation, coupon reuse, race conditions, workflow bypass | | **SSRF** | Internal host access via user-controlled URLs or redirect parameters | | **File Attacks** | Path traversal, unrestricted upload, dangerous file types | Each tester uses a **3-gate confirmation protocol**: execute a baseline request, execute the attack, compare responses. A finding is only reported when there is a measurable, reproducible difference — not on speculation. Duplicate findings (same endpoint + attack vector) are automatically suppressed across the session. --- ### Security Skills CyberStrike ships with **7,600+ security skill files** — structured, Ed25519-signed methodology documents that give agents deep domain knowledge at runtime. Skills are lazy-loaded (one at a time, on demand) and statically injected into agent prompts. **Skill categories:** | Category | Skills | What They Cover | | ------------------------- | ------ | ----------------------------------------------------------------------------------------------------------------------------------------------