🤓 Latest Submissions
Aranea
ARANEA revolutionizes pentesting by simplifying complex penetration testing workflows into natural language conversations. Pentesting requires security professionals to master dozens of tools, each with hundreds of command-line flags and syntax variations. This steep learning curve creates significant accessibility barriers, and makes simple tasks needlessly complex. Our platform uses Google's Gemini 2.5 Flash AI as an intelligent orchestration layer that interprets natural language queries and automatically executes the appropriate security tools. A pentester can simply type "Scan the network for vulnerabilities" and ARANEA will detect the local network configuration, execute Masscan for host discovery, use RustScan for port enumeration, run Nmap for service fingerprinting, and present results in formatted, human-readable tables with contextual security recommendations. The architecture consists of three core layers: a NEXT-based terminal UI, a Python FastAPI backend with AI-powered agent orchestration and real-time WebSocket communication, and direct integration with industry-standard security tools. ARANEA supports reconnaissance (network scanning, OSINT via Shodan), exploitation (Metasploit Framework with 2000+ exploits), stress testing (DDoS attacks via hping3), and automated documentation through a specialized DocumenterAgent that generates OWASP/PTES-compliant PDF reports. Every testing session is persisted in MongoDB, enabling complete audit trails, and the ability to generate professional penetration testing reports from any previous engagement with a single command. This addresses one of pentesting's most time-consuming aspects—documentation—which traditionally requires 4-8 hours of manual report writing per engagement. ARANEA is not a replacement for human expertise but rather a force multiplier that automates routine tasks, allowing security professionals to focus on creative exploitation and strategic analysis rather than juggling tools.
7 Feb 2026
