GHOSTCREW: AI-Powered Red Team Toolkit Integrating Metasploit, Nmap, and More
An open-source tool, GHOSTCREW, has been developed to enhance the integration between artificial intelligence and offensive security operations. This advanced AI red team assistant utilizes Large Language Models (LLMs), Model Context Protocol (MCP), and…
An open-source tool, GHOSTCREW, has been developed to enhance the integration between artificial intelligence and offensive security operations. This advanced AI red team assistant utilizes Large Language Models (LLMs), Model Context Protocol (MCP), and Retrieval-Augmented Generation (RAG) to automate complex penetration testing tasks using natural language commands.
GHOSTCREW is distinct from standard chatbots as it functions as an operational agent capable of executing real-world security tools. By integrating with the Model Context Protocol, it allows security professionals to orchestrate industry-standard utilities such as Metasploit , Nmap, and SQLMap directly from a chat interface.
The core functionality of GHOSTCREW is its Agent Mode, which employs "Pentesting Task Trees" (PTT) for strategic decision-making. This enables the AI to deconstruct a user's high-level objectives, such as "map the network and check for open SMB ports," into actionable steps, executing them autonomously and adapting to new findings.
For structured assessments, the toolkit includes Workflows that allow researchers to run predefined sequences of tools for comprehensive scans. It also features a RAG-enhanced knowledge base, enabling the AI to access local files, including specific payload lists, configurations, or previous reports, to better inform its actions.
An open-source tool, GHOSTCREW, has been developed to enhance the integration between artificial intelligence and offensive security operations.
GHOSTCREW consolidates various security tools into a single control plane. The following is an overview of its current capabilities:
Network & Port Scanning: Nmap, Masscan, Naabu Web Reconnaissance: Amass, Assetfinder, HTTPx, Wayback URLs Vulnerability Scanning: Nuclei, SSL Scanner, Scout Suite (Cloud) Exploitation & Brute Force: Metasploit Framework, Hydra, SQLMap Fuzzing & Discovery: FFUF, Arjun, Katana, AlterX Infrastructure: Certificate Transparency, Shuffledns
Post-engagement, GHOSTCREW facilitates the documentation process by automatically generating detailed Markdown reports. These reports compile structured findings, evidence of exploitation, and remediation recommendations, significantly reducing the time researchers spend on manual writing.
The tool is available on GitHub and requires Python and Node.js for full functionality. Future updates are planned to include support for BloodHound and CrackMapExec, further establishing GHOSTCREW as a critical tool for modern red teams.
Based on reporting by GBHackers.