GitHub open-source AI penetration testing tool PentestCode: 13 Agents share battle status, yet it itself has stepped on two high-severity vulnerabilities
The GitHub open-source AI penetration testing tool PentestCode (s0ld13rr/pentestcode, MIT license) is a hard fork of OpenCode, using a master controller plus 13 dedicated sub-Agents sharing a single persisted structured battle state to advance the penetration process; the latest version v0.2.7 was released on October 23. The tool has 18 built-in tools and forces scan output through a parser, offers three modes: auto, free, and guided, with default tool permissions fully open, and the free mode explicitly written to bypass scope checks. On October 20, a user submitted two vulnerability issues in the repository: a CVSS 8.8 arbitrary file write that can use content returned by the target to induce the Agent to rewrite the operator's local authorized_keys, and a CVSS 7.5 command injection that can execute commands on the operator's local machine via credential values or hostnames. The author recommends running in a disposable virtual machine, upgrading to 0.2.7 or newer, and not using free mode against real targets.
The author checked the fix code for both vulnerabilities item by item; readers who want to try this AI penetration tool can use this to confirm version requirements and pitfalls to avoid such as local machine isolation.