How sooryathejas/metatron works
Metatron is a local CLI penetration-testing assistant. A user submits an IP or domain, selects reconnaissance tools, and the CLI gathers nmap, WHOIS, web, header, DNS, and optional Nikto results. The AI analyzes that evidence through Ollama, optionally dispatching more tools or web/CVE searches, then returns vulnerabilities, fixes, exploits, risk, and a summary. The CLI persists the session in MariaDB, supports history and edits, and exports selected sessions as PDF or HTML. Some orchestration details are inferred from documented imports and sampled functions.
Components 13
CLI Workflow
- Metatron CLI
metatron.py
Reconnaissance
- Recon Controller
tools.py
AI Intelligence
- Target Analysis
llm.py - Web Search
search.py
Persistence Reports
- Session Records
db.py - Report Exporter
export.py - PDF HTML Reports
export.py
Other components
- Pentest User
- Recon Binaries
- Ollama Model
- DuckDuckGo Search
- MITRE CVE
- MariaDB Database
Connections 17
- Pentest User → Metatron CLI: submits target
- Metatron CLI → Recon Controller: runs recon
- Recon Controller → Recon Binaries: executes tools
- Metatron CLI → Target Analysis: passes scan
- Target Analysis → Ollama Model: requests analysis
- Target Analysis → Recon Controller: dispatches tools
- Target Analysis → Web Search: dispatches searches
- Web Search → DuckDuckGo Search: queries web
- Web Search → MITRE CVE: fetches CVEs
- Target Analysis → Metatron CLI: returns findings
- Metatron CLI → Session Records: saves results
- Session Records → MariaDB Database: writes sessions
- Metatron CLI → Session Records: reads history
- Metatron CLI → Session Records: edits results
- Metatron CLI → Report Exporter: opens export
- Report Exporter → MariaDB Database: reads sessions
- Report Exporter → PDF HTML Reports: generates reports