GHOSTCREW is a new AI-based red team assistant that makes penetration testing faster and easier. It uses artificial intelligence, combined with the Model Context Protocol (MCP), to integrate with popular security tools.
The toolkit helps security professionals perform complex testing tasks through simple conversations with an AI assistant.
Key Features for Security Teams
The platform offers several powerful capabilities. Users can interact with the AI via natural language, asking questions and providing instructions.
GHOSTCREW automatically calls professional tools like Metasploit, Nmap, SQLMap, and others based on your requests.
The toolkit supports autonomous penetration testing through intelligent decision-making. It can execute predefined workflows that systematically use multiple security tools to perform comprehensive assessments.
Teams also benefit from automatic markdown reports that include findings, evidence, and recommendations.
GHOSTCREW integrates with 18+ security tools through MCP servers. This includes Nmap for network scanning, Metasploit for exploitation, FFUF for web fuzzing, SQLMap for SQL injection testing, and Nuclei for vulnerability scanning.
Additional tools cover password brute-forcing, subdomain enumeration, cloud security auditing, and SSL/TLS analysis.
The toolkit retains conversation history for multi-turn dialogues and supports streaming output to improve the user experience.
Advanced teams can enhance responses using a local knowledge base with custom wordlists and payloads.
Installation is straightforward. Clone the GitHub repository, set up a Python virtual environment, and install dependencies. You’ll need Node.js for most MCP tools and Python’s uv package for Metasploit integration.
Run the application with a simple command, and you’re presented with an intuitive menu. Configure which security tools to connect to, select Chat, Workflows, or Agent mode, and start testing.
The system stores all configurations in an mcp.json file for easy management.
GHOSTCREW supports single-line mode for quick queries and multi-line mode for complex instructions. Users can switch between modes seamlessly during testing sessions.
The developers plan to add BloodHound, CrackMapExec, Gobuster, Responder, and Bettercap in upcoming releases, further expanding capabilities.
GHOSTCREW democratizes advanced penetration testing. Security teams no longer need to switch between multiple tools or manually learn complex command syntax.
The AI assistant handles tool orchestration, making professional-grade security assessments accessible to teams of all sizes.
Organizations looking to improve their penetration testing efficiency should explore this innovative toolkit. It represents the future of how AI and traditional security tools work together to strengthen defensive capabilities.
Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyber Press as a Preferred Source in Google.
%20(1).webp?fit=1600,900&ssl=1&description=The toolkit helps security professionals perform complex testing tasks through simple conversations with an AI assistant.){kind=link}