GIOR Pentest Framework— Open Source

Full-chain pentest
automation for OpenCode.

From recon to report — 15 phases of automated exploitation with AI-powered intelligence. No API keys. No external services.

15
Phases
250+
Playbooks
109
Tools
18
Intel DBs
gitest — zsh
$ oc /gitest https://target.com
[GITEST] Loading 18 intelligence databases...
[GITEST] 251 skill playbooks available
[PHASE 01A] Recon: scanning target.com
→ Port 80 open (HTTP — envoy)
→ Port 443 open (HTTPS)
→ WAF: Not detected
→ .env file exposed!
[PHASE 02A] SQLi scan on 3 endpoints
→ Parameter 'artist' might not be injectable
→ Testing XSS vectors...
✅ Report generated — 6 findings (2 CRITICAL, 2 HIGH, 1 MED, 1 LOW)
Features

Built for real exploitation

Not another scanner. gitest executes payloads, chains attacks, and simulates what a real competitor would do.

01

Full-Chain Exploitation

15 phases from recon to persistence — real exploitation with payloads, not just scanning.

02

250+ Attack Playbooks

Web, API, mobile, AD, cloud, CTF, forensics — categorized and ready to execute.

03

AI-Native Intelligence

18 JSON intel files for attack chaining, CVE correlation, pattern matching, and WAF bypass.

04

Multi-Vector Approach

OSINT, source code analysis, supply chain, API abuse, business logic, and cloud attacks.

05

Competitor Simulation

Report generation with CVSS scoring, simulating what a real competitor would do.

06

Zero External Dependencies

Runs on OpenCode's built-in model. No API keys, no external services needed.

Pipeline

15 phases. End to end.

From environment setup to final report — every phase is automated with real exploitation, not just scanning.

01
Env Setup00

Intel loading & tool verification

02
Recon01A

Subdomain, port, service enumeration

03
Source Code01B

Git dump, backup files, JS secrets

04
OSINT01C

People, email, GitHub recon

05
Web Vuln02A

SQLi, XSS, directory fuzzing

06
Supply Chain02B

CDN, dependency confusion

07
Spider02C

Full site crawling

08
API Abuse03

JWT, GraphQL, IDOR, rate limit

09
Auth Attacks04

Brute, spray, default creds

10
Business Logic05

Race conditions, workflow flaws

11
Cloud06

Subdomain takeover, S3 buckets

12
Data Exfil07

PII, financial data, credentials

13
Persistence08

Admin creation, webshell

14
Provider09

SSO, OAuth, webhook security

15
Report10

CVSS scoring, competitor simulation

Intelligence

AI-native intelligence stack

18 JSON databases powering attack chaining, pattern matching, WAF bypass, and CVE correlation.

attack_chains
.json
cve_correlations
.json
patterns
.json
waf_signatures
.json
waff_bypass
.json
port_correlations
.json
tech_correlations
.json
endpoint_patterns
.json
escalation_patterns
.json
file_extensions
.json
fuzzer_data
.json
vuln_ontology
.json
unified_patterns
.json
ab_signals
.json
verification_patterns
.json
skills
.json
tools
.json
tools_meta
.json
Quick Start

Install in 2 commands

Clone, install, and run. No API keys, no config.

// Clone the framework
$ git clone https://github.com/GiorMalik/gitest.git
// Install & verify tools
$ cd gitest && bash setup.sh
// Full-chain exploitation
$ oc /gitest https://target.com
Open Source · GPL-3.0

Start your first full-chain pentest

Clone the repo, run the command, and watch gitest execute 15 phases of automated exploitation.