kali-pentest

What kali-pentest does

Unlike a fixed automated scanner, the agent connects to a Kali environment over SSH, Docker or, when the agent itself runs on Kali, directly over bash, then plans its own attack path from the target, selects a tool, and integrates results across phases to adapt strategy as it goes. The skill ships coverage matrices, zero-findings fallbacks and objective stopping conditions for 15 scenario playbooks spanning active directory, web application, password-audit and post-exploitation work, and produces a structured report at the end.

Every target action requires explicit written authorization and approved scope before it starts, and high-risk actions sit behind mandatory human approval gates. A recorded demo walks through an attack chain from an unauthenticated Redis instance to domain admin credential reuse, with the full markdown and HTML reports included for review.

Key features

• Autonomous attack-path planning across 269 CLI tools in 14 categories
• 15 scenario playbooks with coverage matrices and zero-findings fallbacks
• Mandatory authorization checks and human approval gates on high-risk actions
• Connects to Kali over SSH, Docker, or directly when the agent runs on Kali itself
• Structured, reproducible reports with evidence and remediation steps

When to use it

• Running an authorized penetration test through an agent instead of a fixed scanner script
• Teaching a security team how an agent plans and adapts an attack path across phases
• Producing a structured pentest report with evidence and remediation in one pass

Who it is for: Security researchers and red teams running authorized penetration tests through an AI agent that needs a Kali toolset and human approval gates.

How it fits with Hermes Agent

kali-pentest lists Hermes Agent as one of three supported agents and documents its Hermes-specific skill install path at ~/.hermes/skills/.

How to install kali-pentest

These commands are copied from the project's README. Check the repository for the latest steps before you run them.

cp -r kali-pentest /path/to/your/agent/skills/kali-pentest

Requirements: A Kali Linux environment reachable by the agent, over SSH, Docker, or directly if the agent runs on Kali itself

Note: Intended solely for authorized penetration testing and security research; unauthorized use against a target is illegal.

FAQ