{"id":13673,"date":"2026-06-17T10:04:08","date_gmt":"2026-06-17T10:04:08","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2026\/06\/17\/airecon-ai-powered-penetration-testing-tool-with-kali-linux-sandbox\/"},"modified":"2026-06-17T10:04:08","modified_gmt":"2026-06-17T10:04:08","slug":"airecon-ai-powered-penetration-testing-tool-with-kali-linux-sandbox","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2026\/06\/17\/airecon-ai-powered-penetration-testing-tool-with-kali-linux-sandbox\/","title":{"rendered":"AIRecon: AI-Powered Penetration Testing Tool with Kali Linux Sandbox"},"content":{"rendered":"

AIRecon: AI-Powered Penetration Testing Tool with Kali Linux Sandbox
\n \t

\n
<\/BR>
\n
\n \t

\n
<\/BR><\/p>\n

\n

AIRecon is an autonomous penetration testing agent that runs entirely offline, combining a self-hosted Ollama LLM with a Kali Linux Docker sandbox<\/a> to automate end-to-end security assessments without exposing any data to the cloud.<\/p>\n

Developed by researcher pikpikcu, it eliminates the prohibitive cost of commercial API-based models like GPT-4 or Claude for recursive recon workflows that can demand thousands of LLM calls per session.<\/p>\n

Commercial AI-powered security tools send target intelligence to external servers and require ongoing API subscriptions. AIRecon flips this model entirely; all tool output, vulnerability reports, and session data stay on the operator\u2019s machine.<\/p>\n

It integrates natively with Caido proxy, offering five built-in tools: list, replay, automate (using \u00a7FUZZ\u00a7<\/code> markers), findings, and scope management. This makes it particularly well-suited for bug bounty hunters and red teamers who operate under strict data-handling policies.<\/p>\n

AIRecon structures every engagement through four automated phases, each with defined objectives, recommended tools, and automatic transition criteria. Phase enforcement is intentionally soft; the agent is guided but never blocked, and checkpoints fire every 5 iterations (phase evaluation), every 10 (self-evaluation), and every 15 (context compression).<\/p>\n

The full stack includes the Kali sandbox<\/a>, browser automation, a custom fuzzer, Schemathesis API fuzzing, and Semgrep SAST for static source analysis.<\/p>\n

\"AIrecon
AIRecon Tool<\/figcaption><\/figure>\n

One of AIRecon\u2019s standout features is its optional airecon-dataset companion, which indexes approximately 1.09 million security records into local SQLite FTS5 databases including CVEs, red team techniques, CTF writeups, Nuclei templates, and bug bounty payloads all completely offline.<\/p>\n

The LLM autonomously calls dataset_search<\/code> before attempting unfamiliar techniques, grounding its decisions in real indexed data rather than pure hallucination. Session memory persists in ~\/.airecon\/memory\/airecon.db<\/code>, storing findings, WAF bypass patterns, tool reliability scores, and per-target attack chain discoveries that shape future behavior.<\/p>\n

AIRecon requires a model with native tool-calling support and extended thinking (<think><\/code> blocks). Models below 8B parameters are strongly discouraged due to frequent hallucinations, invented CVEs, and unreliable tool calls. Recommended configurations:<\/p>\n

\n\n\n\n\n\n\n\n\n
Model<\/th>\nVRAM<\/th>\nUse Case<\/th>\n<\/tr>\n<\/thead>\n
Qwen3.5 122B<\/td>\n48+ GB<\/td>\nBest quality, most reliable<\/td>\n<\/tr>\n
Qwen3.5 35B<\/td>\n20 GB<\/td>\nRecommended for most users<\/td>\n<\/tr>\n
Qwen3.5 35B (MoE)<\/td>\n16 GB<\/td>\nLower VRAM footprint<\/td>\n<\/tr>\n
Qwen3.5 9B<\/td>\n6 GB<\/td>\nMinimum viable setup<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n

AIRecon ships with 57 built-in skill files and 289 keyword-to-skill auto-mappings covering the most common offensive techniques. The community airecon-skills repository adds 57 additional CLI-based playbooks for CTF, bug bounty, and penetration testing engagements.<\/p>\n

MCP server integration is also supported via ~\/.airecon\/mcp.json<\/code>, allowing the agent to dynamically expose external tooling such as custom XSS generators or proprietary API scanners as first-class agent tools.<\/p>\n

Installation & Google Colab Support<\/strong><\/h2>\n

Installation from GitHub requires<\/a> Python 3.12+, Docker 20.10+, and a running Ollama instance, and can be completed in a single command:<\/p>\n

bashcurl -fsSL https:\/\/raw.githubusercontent.com\/pikpikcu\/airecon\/refs\/heads\/main\/scripts\/install.sh | bash<\/code><\/pre>\n
For operators without sufficient local VRAM, AIRecon supports a Google Colab T4 GPU tunnel setup via Cloudflare, allowing a free-tier Colab session to serve the model while AIRecon\u2019s TUI runs locally.<\/p>\n
The free T4 GPU (15 GB VRAM) supports qwen3.5:9b<\/code>, though sessions are capped at 12 hours and are not suited for deep autonomous recon that exceeds that window.<\/p>\n
CISO & Security Leaders: Your next breach may not have a face. Join ISC2\u2019s LIVE webinar, \u201cGhost in the Machine\u201d<\/strong><\/a><\/p>\n
The post AIRecon: AI-Powered Penetration Testing Tool with Kali Linux Sandbox<\/a> appeared first on Cyber Security News<\/a>.<\/p>\n<\/div>\n
 \t

\n 
<\/BR>
\n    Guru Baran
\n \t

\n
<\/BR>
\nGo to cyber-security-news<\/a>
\n \t

\n 
<\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"
AIRecon: AI-Powered Penetration Testing Tool with Kali Linux Sandbox AIRecon is an autonomous penetration testing agent that runs entirely offline, combining a self-hosted Ollama LLM with a Kali Linux Docker sandbox to automate end-to-end security assessments without exposing any data to the cloud. Developed by researcher pikpikcu, it eliminates the prohibitive cost of commercial API-based […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[129,63,1709],"tags":[130],"class_list":["post-13673","post","type-post","status-publish","format-standard","hentry","category-cyber-security","category-cyber-security-news","category-cyberpedia","tag-cyber-security-news"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/13673"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=13673"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/13673\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=13673"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=13673"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=13673"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}