BLHACKBOX Autonomous Pentesting Framework

Example Use Cases

• 1

  Perform autonomous, end-to-end penetration testing using a variety of security tools.

• 2

  Orchestrate multiple MCP servers for reconnaissance, exploitation, post-exploitation, and reporting.

• 3

  A Docker-based pentesting environment with AI-driven workflows and integrated reporting.

Description

BLHACKBOX is a modular pentesting framework that orchestrates multiple MCP servers running security tools like Kali Linux tools, Wireshark, and headless Chromium for screenshots. It enables autonomous pentesting workflows driven by AI clients such as Claude Code or ChatGPT, which directly interact with MCP servers to run scans, analyze results, and generate structured pentest reports. The framework runs entirely in Docker containers, requiring no host installation of tools, and supports advanced features like cross-session knowledge graphs with Neo4j and a web UI via Portainer.