pentest-coordinator

Automated penetration testing orchestration coordinates reconnaissance, exploitation, and privilege escalation phases through a ReAct-inspired loop, maintaining unified state in .pentest-state.json to track assets and progress until user and root indicators are captured.

Yes, autonomous pentest campaigns run effectively in isolated lab or VulHub-like environments, executing continuous security testing workflows while enforcing circuit breakers to prevent stagnation and enable independent pivoting through complex attack scenarios.

State management for pentest tracking uses a .pentest-state.json file to persist discovered assets, flags, loaded attack plans, and execution progress, ensuring the coordinator maintains context across reconnaissance and exploitation phases.

Coordinating red-team simulations without manual intervention uses an autonomous ReAct-inspired loop to manage attack phases, loading plans from AD_ATTACK_SUPPLEMENT.md and integrating with knowledge bases to capture both user and root flags.

Automated security testing integrates with CI/CD pipelines for continuous triage by autonomously coordinating assessment campaigns, applying circuit breakers to manage execution and capturing target indicators in controlled environments.

Preventing stagnation during autonomous privilege escalation relies on enforced circuit breakers within the coordination loop, enabling independent pivoting and continuous operation when facing complex attack scenarios in the target environment.