Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
RedAmon is an AI framework that connects reconnaissance, exploitation, and post-exploitation activities into an automated security-testing pipeline, while organizing findings and proposing code fixes. It is for authorized penetration testing, security research, and education. The catalogue entries provide skills and instructions for working with the framework.
Latest release v6.14.1 — v6.14.1 - update no longer refuses to pull after a scan · 11 Sept 2026
2 files for Codex, OpenCode and Claude Code: redamon AGENTS.md, redamon CLAUDE.md — 2,719 tokens loaded in every session.
AGENTS.md A 2,716 tok CLAUDE.md A 3 tok These files are samugit83/redamon's own configuration — they tell Codex, OpenCode and Claude Code how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.