Skip to content

dostavic/hackaton2024

Repository files navigation

Testify

LOGO

Testify is an AI-driven automated pentesting tool designed to streamline vulnerability validation and exploit generation. Built as a modular application composed of microservices, it empowers security teams to identify and confirm exploitable issues in web applications with minimal manual effort.

Functionality

AI-Driven Pentesting: Leverages AI to generate context-aware payloads dynamically for any vulnerabilities you dare to throw at it.

Microservice Architecture: Utilizes microservice architecture for maximum efficiency and reliability.

  • RAG Module: Matches vulnerabilities from predefined lists (e.g., CWE, CVE) to discovered endpoints and generates relevant payloads.
  • Code Runner: Executes dynamically generated or predefined payloads and validates the results.
  • Report Generator: Produces actionable reports with success/failure status, payloads used, and proof artifacts.

Proof-of-Exploit Generation: Captures evidence of successful exploitation, such as screenshots for XSS or altered server responses for SQLi.

Ease of Deployment: Comes with a Docker Compose setup for seamless deployment, integrating Nginx for routing and load balancing.

How to start

docker-compose up --build

Architecture

image

Hack drawio(1)

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Contributors 4

  •  
  •  
  •  
  •