How pikpikcu/airecon works
AIRecon is an autonomous penetration-testing agent exposed through a Textual TUI and an HTTP service. A user submits a target and prompts; the agent iterates with an OpenAI-compatible model, moving through guided RECON, ANALYSIS, EXPLOIT, and REPORT stages while invoking security tools. Findings can be correlated, verified, reported, and learned from across sessions. README documents major integrations and capabilities; sampled excerpts do not show every route or tool-dispatch connection, so uncertain wiring is omitted.
Main entry points: executors_dispatch.py Tool dispatch · loop.py Agent loop · pipeline.py Phase pipeline · loop_cycle_llm.py LLM cycle
Components 25
User interfaces
- Textual TUI
airecon/tui/app.py - HTTP service
airecon/proxy/server.py
Agent workflow
- Agent loop
airecon/proxy/agent/loop.py - LLM cycle
airecon/proxy/agent/loop_cycle_llm.py - Phase pipeline
airecon/proxy/agent/pipeline.py - Tool dispatch
airecon/proxy/agent/executors_dispatch.py - RECON
airecon/proxy/agent/pipeline.py - ANALYSIS
airecon/proxy/agent/pipeline.py - EXPLOIT
airecon/proxy/agent/pipeline.py - REPORT
airecon/proxy/agent/pipeline.py
Security capabilities
- Scope guard
airecon/proxy/scope.py - Kali sandbox
airecon/proxy/docker.py - Browser automation
airecon/proxy/browser.py - Fuzzing
airecon/proxy/fuzzer.py - Semgrep SAST
airecon/proxy/semgrep.py - Caido integration
airecon/proxy/caido_client.py
State and reporting
- Finding correlation
airecon/proxy/agent/correlation_engine.py - Persistent memory
airecon/proxy/memory.py - Session state
airecon/proxy/agent/session.py - Report generation
airecon/proxy/reporting.py
External integrations
- OpenAI-compatible gateway
airecon/proxy/llm.py
Other components
- Tester
- Authorized target
- Docker runtime
- Caido proxy
Connections 28
- Tester → Textual TUI: submits target
- Textual TUI → HTTP service: HTTP requests
- HTTP service → Agent loop: initializes and serves
- Agent loop → LLM cycle: runs iteration
- LLM cycle → OpenAI-compatible gateway: requests completion
- OpenAI-compatible gateway → LLM cycle: returns response
- LLM cycle → Tool dispatch: dispatches tools
- Agent loop → Phase pipeline: guides phases
- Phase pipeline → RECON: selects phase
- Phase pipeline → ANALYSIS: selects phase
- Phase pipeline → EXPLOIT: selects phase
- Phase pipeline → REPORT: selects phase
- Tool dispatch → Scope guard: checks target scope
- Tool dispatch → Kali sandbox: runs commands
- Tool dispatch → Browser automation: invokes browser
- Tool dispatch → Fuzzing: invokes fuzzing
- Tool dispatch → Semgrep SAST: invokes analysis
- Tool dispatch → Caido integration: invokes Caido tools
- Kali sandbox → Docker runtime: runs in
- Caido integration → Caido proxy: queries proxy
- Tool dispatch → Authorized target: tests in-scope
- Agent loop → Session state: updates session
- Agent loop → Persistent memory: recalls and persists
- Agent loop → Finding correlation: correlates findings
- Finding correlation → Session state: provides attack chains
- REPORT → Report generation: generates report
- Report generation → Session state: uses findings
- HTTP service → Textual TUI: streams events