aradotso avatar

Metatron Pentest Assistant

This is a fully local penetration testing assistant that chains nmap, whois, nikto, and other recon tools, feeds the output to a fine-tuned Qwen LLM running via Ollama, and stores everything in MariaDB with scan history and vulnerability tracking. You get PDF and HTML reports, an agentic loop that reasons about findings, and zero API calls. It's built for Parrot OS but runs anywhere with the tooling installed. The setup is manual but well documented: pull a 4B or 9B model, build a custom Modelfile, create five database tables, and run the CLI in a second terminal while the model stays loaded. If you want AI assisted pentesting that never leaves your machine and you're comfortable with some assembly required, this is a solid starting point.

skills.sh installs
602
GitHub stars
61
last updated
Jul 14, 2026

Install

$ npx -y skills add aradotso/trending-skills --skill metatron-pentest-assistant --agent claude-code

Installs into .claude/skills of the current project.

Files

METATRON Penetration Testing Assistant

Skill by ara.so — Daily 2026 Skills collection.

METATRON is a CLI-based AI penetration testing assistant that runs entirely locally — no cloud, no API keys. It orchestrates recon tools (nmap, whois, whatweb, curl, dig, nikto), feeds results to a locally running fine-tuned LLM (metatron-qwen via Ollama), and stores all findings in MariaDB with full scan history, vulnerability tracking, and PDF/HTML export.


Architecture Overview

metatron.py     ← CLI entry point, main menu, scan orchestration
db.py           ← MariaDB CRUD (history, vulns, fixes, exploits, summary)
tools.py        ← Recon tool runners (nmap, whois, whatweb, curl, dig, nikto)
llm.py          ← Ollama interface, agentic loop, AI tool dispatch
search.py       ← DuckDuckGo search + CVE lookup (no API key)
Modelfile       ← Custom metatron-qwen model config

Database spine: every scan creates a sl_no in history; all other tables link via sl_no.


Installation

1. Clone and set up Python environment

Sponsors

Details

Repository
github.com/aradotso/trending-skills
Category
Security
First seen
Jun 3, 2026

More from aradotso/trending-skills

All 251

Recommended

More Security
1eyadkelleh avatarsecurity-passwordseyadkelleh/awesome-skills-securityTop password lists for authorized security testing: common passwords, darkweb leaks, worst passwords. Curated essentials (<10MB).591skills.sh installs
2yoanbernabeu avatarsupabase-audit-auth-configyoanbernabeu/supabase-pentest-skillsAnalyze Supabase authentication configuration for security weaknesses and misconfigurations.576skills.sh installs
3aradotso avatarbluehammer-vulnerability-pocaradotso/trending-skillsbluehammer vulnerability poc527skills.sh installs
4aj-geddes avatarsecurity-documentationaj-geddes/useful-ai-promptsCreate security policies, guidelines, compliance documentation, and security best practices. Use when documenting security policies, compliance requirements, or455skills.sh installs
5leonmelamud avatarcode-security-auditleonmelamud/claude-code-security-reviewcode security audit446skills.sh installs
6aradotso avatarcodex-oauth-automation-extensionaradotso/trending-skillscodex oauth automation extension400skills.sh installs