VenomAI - VenomAI is an AI-powered cybersecurity assistant b

项目说明

An AI-powered cybersecurity agent

Table of Contents

* Introduction
* Features
* Requirements
* System-Requirements
* Installation
* Usage
* Options
* License
* Contributing
* Disclaimer

Introduction

is an autonomous AI agent designed for cybersecurity analysis, threat e, and intelligent automation. Built with Flask and PhiData, allows users to interact naturally while performing offensive and defensi tasks such as subdomain discovery, port scanning, SSL certificate checks, and more. This intelligent agent combines real-time plugin execution with large language model reasoning making it an ideal AI companion for ethical hackers, defenders, and researchers alike. YouTube video link

Features

AI-powered chat interface using OpenAI ( integration)
Built-in plugin system for offensive and defensi utilities
Web-based GUI with dark mode, plugin selector, and chat history
Supports both natural language input and plugin-based analysis

Requirements

Python 3.8+
Flask
PhiData
OpenAI API Key
Nmap (for port scanning plugin)

System Requirements

Before installing Python dependencies, ensure the following are installed:

Python 3.8+
pip
Rust & Cargo (required for some packages)

To install Rust & Cargo on Debian-based systems (like Kali Linux):

Installation

Follow these steps to set up and run locally:

1. Sign Up for API Keys
To enable AI and security features, you’ll need two API keys:

OpenAI API Key: Get it from

API Key: Get it from

2. Clone the Repository
git clone

cd

3. Set Your API Keys in the .env File
Na into the ai folder and edit the .env file. Add your API keys like this:

OPENAI_API_KEY=your_openai_api_key_here
=your_
Or run this from the project root (adjusting with your keys):

Linux/macOS

echo "OPENAI_API_KEY=your_openai_api_key_here" >> .env && echo "=your_" >> .env

Windows CMD

echo OPENAI_API_KEY=your_openai_api_key_here>> ai\.env && echo =your_>> ai\.env

4. Create a En (Recommended)
python -m venv venv
source venv/bin/activate # On Windows: ven\activate

5. Install Dependencies
pip install -r requirements.txt
pip install openai

7. Run the Flask Server
python3 .py

Visit in your browser to start using .

Usage

To use , follow these simple steps:
Select a plugin from the dropdown (e.g., Port Scanner, DNS Lookup, SSL Checker, etc.)
Type your query or target domain into the message input field or ask general cybersecurity questions like “What is the difference between IDS and IPS?”
Click Send will either run the selected plugin or provide an intelligent AI-generated response based on your input.

Options

Plugin Options<br>
Port Scanner – Uses Nmap to scan open ports.<br>
Subdomain Finder – Extracts subdomains using crt.sh.<br>
Find Pages – Finds public pages using HackerTarget API.<br>
SSL Checker – Retrieves SSL grade and certificate chain from SSL Labs.<br>
Security Headers – Scans for missing HTTP security headers.<br>
Virus Check – Uses to assess domain reputation.<br>
Whois Lookup – Performs WHOIS domain lookup.<br>
DNS Lookup – Queries DNS records.<br>
IP Address Lookup – Fetches geolocation and ASN info from ipinfo.io

License

is released under the GNU General Public License 3 (GPL-3.0).
This means you are free to redistribute or modify the software under the terms of the GPL as published by the Free Software Foundation, either 3 of the License or (at your option) any later .

This software is distributed in the hope that it will be useful, but without any warranty—not even the implied warranty of merchantability or fitness for a particular purpose.
For more details, please refer to the GNU General Public License.

Contributing

Contributions are always welcome! If you'd like to contribute to , feel free to fork the repository, work on your impro or ideas, and submit a pull request — whether it's bug fixes, new features, or enhancements to existing capabilities.

Disclaimer

is released under the GNU General Public License 3 (GPL-3.0).
This means you are free to redistribute or modify the software under the terms of the GPL as published by the Free Software Foundation, either 3 of the License or (at your option) any later .

This software is distributed in the hope that it will be useful, but without any warranty—not even the implied warranty of merchantability or fitness for a particular purpose.
For more details, please refer to the GNU General Public License.

项目信息

开发语言：HTML

Star 数：3

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕VenomAI is an AI-powered cybersecurity assistant built with Flask and PhiData. It combines offensive and defensive security capabilities, letting users run recon, threat analysis, and posture checks from a single chat interface. Ideal for ethical hackers, researchers, and defenders seeking smart automation.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。