Skillget

cain-agent

agent
Guvenlik Denetimi
Basarisiz
Health Gecti
  • License — License: Apache-2.0
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 21 GitHub stars
Code Basarisiz
  • rm -rf — Recursive force deletion command in tools/install-tools.sh
Permissions Gecti
  • Permissions — No dangerous permissions requested

Bu listing icin henuz AI raporu yok.

SUMMARY

Real-world AI Penetration Testing Engineer — authorized security assessments, not CTF. Built-in cloud module: AWS/Azure/GCP/阿里云/腾讯云/华为云. Powered by Claude Agent SDK.

README.md

Cain — Real-world AI Penetration Testing Engineer

🚧 Under active development. Star & watch for updates.

Cain is an AI penetration testing engineer built for real-world authorized security assessments — not a CTF toy. It understands business logic, maintains a global attack state machine, adapts to real WAF/risk-control environments, and ships with a built-in cloud penetration module covering AWS / Azure / GCP / 阿里云 / 腾讯云 / 华为云.

Built on Claude Agent SDK.

Why Cain

CTF/靶场型 Agent Cain (实战型)
Target Static labs, preset flags Real enterprise assets, bug bounty, authorized engagements
Vulnerability focus Known syntax-pattern vulns Business logic flaws, auth chains, cloud misconfigurations
Environment No WAF, no rate limiting Real WAF / risk control with dynamic strategy adjustment
Deliverable A flag Auditable evidence chain + reproducible PoC + remediation advice

Core Design

Deterministic engineering constrains agent freedom — stage transitions, scope enforcement, and dangerous-operation circuit breakers are hard engineering constraints; path selection and evidence analysis are left to the agent.

  • Orchestrator — deterministic Python state machine (recon → test → framework → report)
  • Dual-LLM split — Planner (strategy) / Executor (Claude Agent SDK, tactics)
  • Hook-based safety — PreToolUse scope guard, credential redaction, token budget circuit breaker
  • Workspace external memory — all state as files; crash-resumable, auditable
  • Validation loop — finder/validator agent separation, 4-state structured verdicts
  • Cloud module (unique) — IAM privilege-escalation path analysis, storage exposure (S3/OSS/COS/Blob/GCS), metadata SSRF checks, serverless abuse — including Chinese clouds nobody else covers
  • 65 built-in cloud attack skills — see skills/

⚠️ Legal & Ethical Use

Cain is strictly for authorized security testing — your own environments or engagements with written authorization. Core features run with read-only credentials. Scope is enforced by configuration, not by AI self-discipline. You are responsible for complying with applicable laws.

Status

Phase 0 — project scaffolding. See ROADMAP.md and CHANGELOG.md.

License

Apache-2.0. See LICENSE.

Yorumlar (0)

Sonuc bulunamadi