PentestAgent: Bringing LLM agents into automated penetration testing

The study proposes PentestAgent, an LLM-based automated penetration testing framework that uses RAG to enhance penetration testing knowledge and reduce manual intervention. The framework automates the intelligence gathering, vulnerability analysis, and exploitation phases through multi-agent collaboration. On a comprehensive benchmark, PentestAgent performs better in task completion and overall efficiency.