zakirkun/deep-eye

Deep Eye

Advanced AI-Driven Penetration Testing Tool

---

Deep Eye orchestrates multiple AI providers (OpenAI, Claude, Grok, Gemini, OLLAMA, Groq, Mistral, OpenRouter, OrcaRouter, LiteLLM, LM Studio) for intelligent payload generation, scans targets for 50+ vulnerability checks, and produces professional reports with compliance mapping, dedupe, and retest workflows.

Features

• Multi-AI Provider Support — Failover across 11 providers (generate() abstraction)
• 50+ Vulnerability Checks — SQLi, XSS, SSRF, JWT deep, IDOR, GraphQL deep, CORS/CSP, supply-chain JS, and more
• OpenAPI Ingest — Seed crawl from OpenAPI/Swagger specs
• Context-Aware Payloads — WAF fingerprint, tech stack, CVE-aware generation
• CVE Intelligence — RAG-indexed CVE DB (NVD/MITRE/Exploit-DB patterns)
• AI Triage & Evidence — FP filtering, per-finding evidence summaries, FP replay
• Bug Bounty Report Writer — Auto-generates HackerOne-style Markdown reports per vulnerability
• AI Attack Planner — Optional post-recon check order / budget
• Nuclei-Style Templates — YAML matchers/extractors under templates/
• Auth Helpers — Login macro replay, multi-role session store
• CAPTCHA Detection — reCAPTCHA, hCaptcha, Cloudflare Turnstile, Arkose; challenge solver + skip
• Browser Automation — Playwright (+ optional Browser Use AI)
• Intercepting Proxy — mitmproxy/mitmweb integration
• Compliance Mapping — PCI-DSS v4, SOC2 CC, ISO 27001:2022
• Export Formats — HTML, PDF, JSON, SARIF, JUnit, CSV, XLSX
• Scan Diff & Retest — Diff baselines; --retest-new keeps only new findings
• NL Scope — --scope-nl natural-language allow/deny
• Finding Dedupe — Fingerprint collapse for cleaner reports
• Notifications — Email / Slack / Discord

Requirements

• Python 3.8+
• At least one AI provider API key (or local OLLAMA)
• Playwright (optional, browser tests / challenge solve)
• curl_cffi (optional, tls_evasion)

Installation

Windows:

.\scripts\install.ps1
# uses .deep-venv

Linux/Mac:

chmod +x scripts/install.sh && ./scripts/install.sh
source .deep-venv/bin/activate

Manual:

pip install -r requirements.txt
cp config/config.example.yaml config/config.yaml
# Edit config.yaml with API keys

First launch without config runs the interactive wizard.

Browser automation (optional):

pip install playwright && playwright install chromium

Usage

Basic Scan

python deep_eye.py -u https://target.com

With Configuration File

python deep_eye.py -c config/config.yaml

Verbose / Multi-format

python deep_eye.py -u https://target.com -v
python deep_eye.py -u https://target.com --formats junit,csv,xlsx

Natural-language scope

python deep_eye.py -u https://target.com --scope-nl "only /api/* no /logout host target.com"

Scan Diffing

python deep_eye.py --diff baseline.json current.json --diff-format html --diff-output diff_report.html

Retest only new findings

python deep_eye.py -u https://target.com --retest-new baseline.json

CLI Reference

Configuration

All behavior is controlled via config/config.yaml. See docs/CONFIGURATION.md and config/config.example.yaml.

AI Providers

ai_providers:
  openai:
    enabled: true
    api_key: "sk-..."
    model: "gpt-4o"
  ollama:
    enabled: true
    base_url: "http://localhost:11434"
    model: "llama2"

Supported: openai, claude, grok, ollama, gemini, openrouter, orcarouter, requesty, mistral, groq, lmstudio, litellm, nvidia_nim

Scanner Settings

scanner:
  target_url: "https://target.com"
  default_threads: 5
  default_depth: 2
  enable_recon: true
  ai_provider: "openai"

Vulnerability Checks

vulnerability_scanner:
  enabled_checks:
    - sql_injection
    - xss
    - ssrf
    - cors_csp
    - jwt_deep
    - idor
    - graphql_deep
    # full list in config.example.yaml
  payload_generation:
    use_ai: true
    context_aware: true

OpenAPI / AI pipeline (optional)

openapi:
  enabled: true
  source: "https://target.com/openapi.json"

ai_planner: { enabled: true }
ai_triage: { enabled: true }
evidence_summary: { enabled: true, min_severity: high }
fp_replay: { enabled: true }

reporting:
  formats: [html, json]
  dedupe: true

Project structure

deep-eye/
├── deep_eye.py           # CLI
├── core/                 # Engine, scanner, reports, plugins
├── ai_providers/         # Provider adapters
├── modules/              # Attack + pipeline modules
├── utils/                # HTTP, exports, compliance, scope, fingerprints
├── config/               # config.example.yaml
├── templates/            # Nuclei-style YAML templates
├── plugins/              # Custom PluginBase plugins
├── .agents/skills/       # Agent skills (pentest, bounty, red/blue, ctf)
├── proxy/                # Skill discovery loader
├── scripts/              # CVE DB + RAG builders
├── tests/                # pytest suite
├── data/                 # SQLite + auth_sessions + RAG index
└── docs/                 # Full documentation

Documentation

Testing

pip install -r requirements-dev.txt
pytest
pytest tests/test_features_1_19.py -v

Scripts

python scripts/update_cve_database.py
python scripts/build_cve_rag_index.py

Legal Disclaimer

Deep Eye is for authorized security testing only.

• Only use on systems you own or have explicit written permission to test
• Unauthorized access is illegal
• Users are responsible for compliance with applicable laws
• Authors assume no liability for misuse

License

MIT License. See LICENSE.

Links

• Changelog
• Contributing
• Security
• Issues