pentest-ai

Website · Quick start · Bug bounty · Verification · Documentation · Issues Pentest-AI is an open-source AI penetration testing and bug-bounty tool that proves every finding. It connects an AI client or model to a real pentest workflow — investigating web applications, discovering and reproducing...

pentest-ai v1.4.0

Website · Quick start · Bug bounty · Verification · Documentation · Issues Pentest-AI is an open-source AI penetration testing and bug-bounty tool that proves every finding. It connects an AI client or model to a real pentest workflow — investigating web applications, discovering and reproducing...

pentest-ai v1.2.0

pentest-ai The pentest tool that proves its findings. No oracle, no badge. Website · Install · Why verification · Docs · Benchmarks · Agents · Discord ⚠️ Offensive tooling, authorized testing only. By installing you accept the AUP and Terms. Full text in Responsible use ↓ ptai is an AI-driven...

Params.oracle can be changed to a fake one by front running NFTPairWithOracle's lend function

Lines of code Vulnerability details Impact As neither lend, nor updateLoanParams functions verify params.oracle, the lend call can be front run by a malicious borrower with changing params.oracle to a non-market one. The front run will be an updateLoanParams call where borrower introduces fake...