Atom: Penetration Testing AI Assistant

Overview

Atom is a penetration testing (pentest) AI assistant designed to empower security professionals and enthusiasts alike. By leveraging the power of GPT-4, Atom provides a conversational interface to assist users in mapping, understanding, and exploiting their attack surface with a new level of insight.

What is Penetration Testing?

Penetration Testing, or pentesting, is a simulated cyber attack against your computer or network to check for exploitable vulnerabilities.

Pentesting can involve the attempted breaching of any number of application systems, (e.g., application protocol interfaces (APIs), frontend/backend servers) to uncover vulnerabilities, such as unsanitized inputs that are susceptible to code injection attacks.

The goal of the pentest is to discover these vulnerabilities, determine there severity by attempting to exploit them, and provide a detailed report back of what was vulnerable and how to fix it.

Features

• Attack Surface Mapping: Atom helps map out the attack surface, providing a clear view of potential entry points for penetration testing.
• Dynamic Attack Path Generation: Atom dynamically maps attack paths tailored to the specific attack surface, allowing for a customized approach to each pentest.
• Conversational Interface: Engage with Atom in a chat-like interface, making pentesting more intuitive and accessible. Atom stays fully informed about the current pentest data at all times.
• CVE Research: Atom can automatically research Common Vulnerabilities and Exposures (CVEs) using the NIST vulnerability database and ExploitDB, ensuring up-to-date vulnerability and exploit data.
• Command Generation: Atom provides ready-to-use commands, complete with target IPs and specific command-line arguments, streamlining the testing process.
• API Server: A comprehensive API server with numerous endpoints supports automation and integration with other tools.
• Detailed Documentation: The UI includes detailed API documentation, making it easy for users to understand and utilize Atom's full capabilities.

Getting Started

Prerequisites

Ensure you have Python 3 installed on your system. Atom's dependencies are listed in requirements.txt, which can be installed using pip.

Installation

1. Clone this repository or download the ZIP file.
2. Navigate to the Atom directory.
3. Install the required Python packages:

pip3 install -r requirements.txt

Configuration

helper/project_secrets.py

Your OpenAI API key needs to be stored here. It's crucial to keep this file secure and not share its contents publicly.

Running Atom

To run Atom's server:

python3 server.py

To access Atom's user interface (UI), both the server and the UI need to be running concurrently:

1. Start the server:

python3 server.py

2. In a separate terminal, start the UI:

python3 ui.py

Using Atom

Once the server and UI are running, access Atom's UI through your web browser to start your pentesting session. Atom's conversational interface will guide you through mapping your attack surface, researching vulnerabilities, and crafting your attack path.

Refer to the detailed API documentation included in the UI for information on how to extend Atom's functionality or integrate it with your existing tools and workflows.

Video Overview

For a comprehensive overview and a demo of Atom in action, check out this example video:

https://youtu.be/uWRG7rv38jI