How antifox-ai/antifox works
AntiFox is an AI-assisted penetration-testing platform: an engineer configures an authorized target and goal, then follows an event-driven task from reconnaissance and asset discovery through validation, evidence capture, and report delivery. The documented dual graph separates shared assets from per-task exploration history; planner/worker agents drive exploration, while the web UI supports monitoring and human intervention. The README documents the broad subsystem links; sampled excerpts additionally show task persistence and engine scheduling. Most server wiring and domain implementations were not sampled, so those links rely on README statements.
Main entry points: worker.go Worker · engine.go Task engine · server.go HTTP API · preferences-storage.ts Preference persistence
Components 22
Web interface
- Operations UI
web/src/app/(main)/dashboard/page.tsx - Agent chat
web/src/app/(main)/chat/page.tsx - Preference persistence
web/src/lib/preferences/preferences-storage.ts - Preference config
web/src/lib/preferences/preferences-config.ts - Browser cookies
web/src/lib/cookie.client.ts - Local storage
web/src/lib/local-storage.client.ts
Task control
- HTTP API
server/server.go - Task engine
server/engine.go - Deadline coordinator
server/engine_timeout.go - Task manager
server/manager.go - Service startup
cmd/antifox/main.go
Exploration runtime
- Planner
agent/planner.go - Worker
agent/worker.go - Agent tools
agent/tools.go - LLM harness
engine/harness/query.go
Evidence and delivery
- Shared asset graph
db/assets.go - Exploration graph
db/tasks.go - MITM traffic
traffic/traffic.go - Finding evidence
db/finding_evidence.go - Knowledge RAG
knowledge/service.go - Report generation
report/build.go
Other components
- Engineer
Connections 22
- Engineer → Operations UI: operates
README.md - Operations UI → HTTP API: calls API
README.md - Agent chat → HTTP API: calls API
- Preference persistence → Preference config: reads policy
web/src/lib/preferences/preferences-storage.ts - Preference persistence → Browser cookies: writes cookie
web/src/lib/preferences/preferences-storage.ts - Preference persistence → Local storage: writes storage
web/src/lib/preferences/preferences-storage.ts - HTTP API → Task engine: dispatches tasks
README.md - HTTP API → Task manager: manages tasks
- Task engine → Planner: runs planning
README.md - Task engine → Worker: dispatches work
README.md - Task engine → Deadline coordinator: coordinates deadlines
server/engine.go - Planner → Exploration graph: reads task graph
README.md - Worker → Agent tools: uses tools
agent/worker.go - Worker → LLM harness: runs agent loop
- Worker → Shared asset graph: writes discoveries
README.md - Worker → Exploration graph: writes findings
README.md - Worker → MITM traffic: routes target traffic
README.md - MITM traffic → Finding evidence: links packets
README.md - Worker → Knowledge RAG: retrieves context
README.md - Engineer → Report generation: requests delivery
- Report generation → Finding evidence: renders evidence
- Service startup → Task manager: creates manager
cmd/antifox/main.go