Excalibur

AI-powered autonomous penetration testing agent with evidence-guided attack tree search (EGATS) planning. Solves CTF challenges, Hack The Box machines, and authorized security assessments.

Prerequisites

• Docker -- Install Docker
• LLM Provider (one of):
  • Claude subscription (OAuth login)
  • Anthropic API key
  • OpenRouter API key
  • Local LLM (LM Studio, Ollama, etc.)

Installation

make install          # Build Docker image
make config           # Configure authentication (first time)
make connect          # Connect to container

Usage

Inside the container:

# Interactive TUI mode (default)
excalibur --target 10.10.11.234

# Non-interactive mode
excalibur --target 10.10.11.100 --non-interactive

# With context hint
excalibur --target 10.10.11.50 --instruction "WordPress site, check plugin vulns"

Keyboard shortcuts: F1 Help | Ctrl+P Pause/Resume | Ctrl+Q Quit

Docker Commands

Command	Description
make install	Build the Docker image
make config	Configure API authentication
make connect	Connect to container (main entry point)
make stop	Stop container (config persists)
make clean-docker	Remove everything including config

Running Tests

make test             # All tests (excludes Docker tests)
make test-cov         # Tests with coverage report
make lint             # Ruff linter
make typecheck        # Mypy type checking
make check            # All checks (lint + typecheck)

License

MIT License. See LICENSE.md.

Disclaimer: For educational purposes and authorized security testing only.