A tool to identify remotely exploitable vulnerabilities using LLMs and static code analysis.

Autonomous AI-discovered 0day vulnerabilities

Vulnhuntrs is a security analysis tool designed to detect vulnerabilities in applications. It provides static analysis capabilities to identify potential security issues in your codebase.

Features

• Static code analysis for security vulnerabilities
• Support for multiple programming languages
• Detailed vulnerability reports
• Example vulnerable applications for testing

Installation

# Clone the repository
git clone https://github.com/HikaruEgashira/vulnhuntrs.git

# Build the project
cargo build --release

Usage

vulnhuntrs -r <path-to-project>

Example Applications

The repository includes example vulnerable applications to demonstrate the tool's capabilities:

• Python app(example/python-vulnerable-app) + gpt-4o-0806

export OPENAI_API_KEY=your-api-key
cargo run -- -r example/python-vulnerable-app 

• Rust app(example/rust-vulnerable-app) + gpt-4o-mini

export OPENAI_API_KEY=your-api-key
cargo run -- -r example/rust-vulnerable-app -m gpt-4o-mini

These examples are for educational purposes only. Do not use them in production environments.

Security

This tool is intended for security research and educational purposes only. Do not use the example vulnerable applications in production environments.

License

AGPL 3.0

Acknowledgements

This project was inspired by the protectai/vulnhunter.