Skip to content

Latest commit

 

History

History
122 lines (82 loc) · 2.51 KB

File metadata and controls

122 lines (82 loc) · 2.51 KB

Vortex — AI Security Agent

Vortex is a local security assessment tool that pairs a Gemini-powered AI agent with a real Linux terminal. You drop in a target URL and the agent takes over — it runs recon, scans for vulnerabilities, and writes a full report on its own.

Built for bug bounty hunters and pentesters who want a fast, autonomous first-pass before going deep manually.


Project Structure

agins/
├── app.py            ← Flask backend + Gemini AI agent
├── index.html        ← Web UI (chat panel + live terminal)
├── icon.png          ← App icon
└── requirements.txt

Setup

1. Install dependencies

pip install -r requirements.txt

2. Set your Gemini API Key

Open app.py and update the key, or set it as an env var:

export GEMINI_API_KEY="your_key_here"

Get a free key at: https://aistudio.google.com/app/apikey

You can also change the key anytime from the Settings button inside the UI without restarting the server.

3. Install scanning tools (Linux/Kali)

# Core tools
sudo apt install nmap nikto curl wget dirb gobuster whatweb wafw00f sqlmap

# Nuclei
go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest

# Subfinder
go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest

4. Start the backend

python app.py

Server runs on http://localhost:5000

5. Open the UI

Open index.html directly in your browser, or serve it:

python -m http.server 8080
# then open http://localhost:8080

How It Works

You → type target URL
  ↓
Gemini → decides the next move
  ↓
Backend → runs the command in Linux
  ↓
Terminal → streams output live
  ↓
Gemini → reads output, continues
  ↓
  ... repeats automatically ...
  ↓
Final security report

Usage

  1. Open index.html in your browser
  2. Enter a target URL in the input field
  3. Hit Scan and watch the agent work
  4. When done, a full report pops up — you can export it as .txt

Safe test targets


Settings

Click the ⚙️ icon in the top-right to:

  • Change the Gemini API key or model at runtime
  • Configure a Telegram bot to receive scan results directly in chat

Legal

Only use Vortex on targets you own or have explicit permission to test. Unauthorized scanning is illegal in most countries.


Developer: @ZeroXJacks