GEMMA By GOOGLE
未认领A fully local, autonomous AI penetration-testing agent powered by Gemma 4-12B and a Flask MCP tool server. Runs recon, attack loops, and report generation on its own — no cloud, no API keys. For authorized security testing only.
更多Security服务器
浏览完整目录安全概况
已认领和已认证的服务器每周接受一次静态扫描，显示代码能触及的范围（外部服务、环境变量、shell 命令、代理配置目录）以及带有已知公告的依赖。认领此列表即可获得。 安全概况的工作原理
40 个工具中显示 40 个
文档中列出的工具 (40)
内容来自项目文档。服务器握手不会验证每个工具的说明或行为。
run_amass
Subdomain enumeration (passive by default)
run_cloudfox
Cloud-infrastructure enumeration
run_command
Arbitrary command execution
run_curl
HTTP request testing
run_dalfox
XSS scanning (reflected / stored / DOM)
run_dnsx
DNS resolution and probing
run_enum4linux
SMB / Samba enumeration
run_exploit
Sandboxed execution of custom PoC scripts
run_feroxbuster
Recursive content discovery
run_ffuf
Web fuzzing
run_gau
Known URLs from OTX / Wayback / Common Crawl
run_ghosttrack
OSINT for username / IP / phone
run_gobuster
Web directory brute forcing
run_gowitness
Web screenshotting for visual recon
run_httpx
HTTP probing and fingerprinting
run_hydra
Credential brute forcing
run_john
Hash cracking
run_katana
Web crawling
run_masscan
Fast port discovery
run_medusa
Fast parallel brute forcing
run_metasploit
Fire a chosen Metasploit module at a target (human-approved)
run_ncrack
Network authentication cracking
run_netstat
Network connection analysis
run_nikto
Web vulnerability scanning
run_nmap
Deep service/version scanning
run_nuclei
Template-based vulnerability scanning
run_phoneinfoga
Phone-number OSINT
run_phonextract
Phone-number OSINT / extraction
run_recon_ng
recon-ng OSINT framework (non-interactive)
run_searchsploit
Exploit lookup
run_setoolkit
Social-engineering toolkit
run_sherlock
Username OSINT across 90+ platforms
run_shodan
Internet-exposure intelligence lookups
run_spiderfoot
Headless multi-module OSINT scanning
run_sqlmap
SQL injection testing
run_subfinder
Subdomain enumeration
run_theharvester
Passive OSINT — emails, subdomains, hosts
run_wafw00f
WAF / security-solution fingerprinting
run_waybackurls
Historical URLs from the Wayback Machine
run_wget
File retrieval