ENNAENNA

Shannon

FeaturedAGPL-3.0

๐Ÿ•ธ Web Scanning ยท TypeScript

Shannon Lite is an autonomous, white-box AI pentester that takes a fundamentally different approach to security testing. Instead of running predefined checks, it reads your source code, understands the application logic, identifies attack vectors, and then executes real exploits to prove vulnerabilities before they reach production. It achieves a 96% score on the XBOW benchmark, outperforming traditional scanners on complex vulnerability chains that require multi-step reasoning. Shannon works with any web application or API, supports multiple frameworks, and produces proof-of-exploitation reports rather than theoretical findings.

41.4kstars
2.1kforks
145issues
Updated today
+I use this

Installation

$ npm install -g @keygraph/shannon

Use Cases

  • Automated penetration testing of web applications
  • Source code-aware vulnerability discovery
  • Proof-of-exploitation for CI/CD security gates
  • Finding complex multi-step vulnerability chains

Tags

ai-pentestingautonomouswhite-boxexploit-proofsource-analysis

Community Reviews

More in Web Scanning