airecon

Why we included this project

Security researchers and pentesters who want to avoid per-call API pricing for autonomous reconnaissance will find AIRecon a fully local alternative to commercial agents. It drives a Kali Linux Docker sandbox from a Textual terminal UI, walks through recon, analysis, exploit, and report stages, and has native Caido proxy integration. Because the model runs through Ollama on your own hardware and findings are stored in on-disk SQLite, target data never leaves the machine and sessions can be resumed later. A built-in skills knowledge base, extendable with a community skill library, gives it playbooks for bug bounty, CTF, and general pentesting out of the box. Worth noting the hardware ask: reliable tool calling really needs roughly an 8B+ model, and the developers recommend a 20GB-plus setup for serious work.