Tool Integration**: AI recognizes and uses actual files from the knowledge folder (wordlists, payloads, configs) with security tools. - **Configurable Models**: Supports configuration of different language model parameters. ## Automated Penetration Testing Workflows GHOSTCREW includes automated penetration testing workflows that provide structured, systematic security assessments. These workflows require MCP tools to be configured and connected to function properly. ### Available Workflows 1. **Reconnaissance and Discovery** - Comprehensive information gathering and target profiling - Performs reconnaissance, subdomain discovery, port scanning, technology fingerprinting, and historical data analysis - **Steps**: 5 systematic phases 2. **Web Application Security Assessment** - Comprehensive web application penetration testing - Tests for directory traversal, SQL injection, web vulnerabilities, SSL/TLS security, authentication flaws, and file inclusion - **Steps**: 6 focused web security phases 3. **Network Infrastructure Penetration Test** - Network-focused penetration testing and exploitation - Includes network scanning, service enumeration, vulnerability identification, misconfiguration testing, and exploitation attempts - **Steps**: 6 network security phases 4. **Complete Penetration Test** - Full-scope penetration testing methodology - Comprehensive assessment covering reconnaissance, enumeration, vulnerability scanning, web testing, network exploitation, post-exploitation, and reporting - **Steps**: 7 complete assessment phases ### Workflow Features - **Tool Integration**: All workflows utilize configured MCP tools (Nmap, Metasploit, Nuclei, etc.) for real security testing - **Professional Output**: Each step provides detailed technical findings, vulnerability analysis, risk assessment, and remediation recommendations - **Report Generation**: Automatically save reports to organized `reports/` directory with workflow-specific naming - **Target Flexibility**: Works with IP addresses, domain names, or network ranges - **Progress Tracking**: Real-time progress indication through each workflow step ### Usage Requirements - **MCP Tools Required**: Automated workflows require at least one MCP security tool to be configured and connected - **Access Control**: The system prevents workflow execution without proper tools to avoid generating simulated results - **Professional Context**: Designed for authorized penetration testing and security assessments only ### How to Use Workflows 1. Start the Pentest Agent and configure MCP tools when prompted 2. Select "Automated Penetration Testing" from the main menu 3. Choose your desired workflow type 4. Enter the target (IP, domain, or network range) 5. Confirm execution and monitor progress 6. Optionally save results to file for documentation ### Startup Effect

GHOSTCREW Terminal Startup Screen
GHOSTCREW's terminal startup interface

### Metasploit Tool Call

GHOSTCREW Metasploit Call
Example of GHOSTCREW invoking Metasploit Framework

## Installation Guide 1. **Clone Repository**: ```bash git clone https://github.com/GH05TCREW/ghostcrew.git cd ghostcrew ``` 2. **Create and Activate Virtual Environment** (recommended): ```bash python -m venv .venv ``` - Windows: ```bash .venv\Scripts\activate ``` - macOS/Linux: ```bash source .venv/bin/activate ``` 3. **Install Dependencies**: ```bash pip install -r requirements.txt ``` 4. **Install MCP Server Dependencies** (Required for tools): - **Node.js & npm**: Most MCP security tools require Node.js. Install from [nodejs.org](https://nodejs.org/) - **Python uv** (for Metasploit): Install with `pip install uv`

GHOSTCREW

Comments