AlienPentest lets Claude run full pentests on Kali Linux

The pitch rests on how penetration testing is normally done: a tester runs tools like nmap, nikto and gobuster one at a time and interprets each output before choosing the next move, which takes deep expertise and a great deal of time. AlienPentest replaces that loop with AI judgment, moving from open ports and running services to known vulnerabilities and then to whether entry is actually possible, and finishing with a report that includes recommended countermeasures.

The distribution model is split in two. The license itself is bought from alienpentest-license.fly.dev and comes in STR, PRO and ENT tiers that differ on monthly sessions, whether exploitation is allowed, and PDF export; the AI side runs on a Claude API key obtained from Anthropic's console, with usage billed by Anthropic and consumption per scan varying with target size. A stealth toggle that inserts 0.5–3 second gaps between tool runs and caps concurrency is offered for real engagements where detection matters, and an interrupted scan can be resumed from a button on the next launch.

For practice, the tool is paired with Metasploitable2, an intentionally vulnerable VM, and lists the flaws it is meant to find automatically — a backdoor in vsftpd 2.3.4 that yields a root shell, a backdoor command in UnrealIRCd 3.2.8.1, an OS command route in Samba 3.0.20, password-free root access to MySQL 5.0.51a, and code execution through Apache PHP 5.2.4 URL arguments. The author states that every operation described was carried out only in environments they own or manage, and the tool is presented as being for certified professionals holding written permission, given that unauthorized testing is a criminal offense under laws including Japan's Unauthorized Access Prohibition Act and the U.S. Computer Fraud and Abuse Act.