zakirkun/deep-eye

深眼

先进的人工智能驱动渗透测试工具

---

Deep Eye 协调多个 AI 提供商（OpenAI、Claude、Grok、Gemini、OLLAMA、Groq、Mistral、OpenRouter、OrcaRouter、LiteLLM、LM Studio）进行智能负载生成，扫描目标进行 50+ 漏洞检查，并生成具合规映射、去重和重测工作流程的专业报告。

特色

• 多AI提供商支持 — 跨11个提供商的故障切换（generate()抽象）
• 50+ 漏洞检查 — SQLi、XSS、SSRF、JWT 深度、IDOR、GraphQL 深度、CORS/CSP、供应链 JS 等
• OpenAPI Ingest — 来自 OpenAPI/Swagger 规范的种子爬取
• 上下文感知负载 — WAF指纹、技术栈、具备 CVE 感知的生成
• CVE 智能 — RAG 索引的 CVE 数据库（NVD/mitre/Exploit-DB 模式）
• AI 分诊与证据 — FP 过滤、每发现证据摘要、FP 回放
• Bug 赏金报告生成器 — 自动生成每个漏洞的HackerOne风格Markdown报告
• AI攻击计划器 — 可选的侦察后检查命令/预算
• 核心风格模板 — [[T1]下YAML匹配器/提取器

Deep Eye

Advanced AI-Driven Penetration Testing Tool

---

Deep Eye orchestrates multiple AI providers (OpenAI, Claude, Grok, Gemini, OLLAMA, Groq, Mistral, OpenRouter, OrcaRouter, LiteLLM, LM Studio) for intelligent payload generation, scans targets for 50+ vulnerability checks, and produces professional reports with compliance mapping, dedupe, and retest workflows.

Features

• Multi-AI Provider Support — Failover across 11 providers (generate() abstraction)
• 50+ Vulnerability Checks — SQLi, XSS, SSRF, JWT deep, IDOR, GraphQL deep, CORS/CSP, supply-chain JS, and more
• OpenAPI Ingest — Seed crawl from OpenAPI/Swagger specs
• Context-Aware Payloads — WAF fingerprint, tech stack, CVE-aware generation
• CVE Intelligence — RAG-indexed CVE DB (NVD/MITRE/Exploit-DB patterns)
• AI Triage & Evidence — FP filtering, per-finding evidence summaries, FP replay
• Bug Bounty Report Writer — Auto-generates HackerOne-style Markdown reports per vulnerability
• AI Attack Planner — Optional post-recon check order / budget
• Nuclei-Style Templates — YAML matchers/extractors under templates/
• Auth Helpers — Login macro replay, multi-role session store
• CAPTCHA Detection — reCAPTCHA, hCaptcha, Cloudflare Turnstile, Arkose; challenge solver + skip
• Browser Automation — Playwright (+ optional Browser Use AI)
• Intercepting Proxy — mitmproxy/mitmweb integration
• Compliance Mapping — PCI-DSS v4, SOC2 CC, ISO 27001:2022
• Export Formats — HTML, PDF, JSON, SARIF, JUnit, CSV, XLSX
• Scan Diff & Retest — Diff baselines; --retest-new keeps only new findings
• NL Scope — --scope-nl natural-language allow/deny
• Finding Dedupe — Fingerprint collapse for cleaner reports
• Notifications — Email / Slack / Discord

Requirements

• Python 3.8+
• At least one AI provider API key (or local OLLAMA)
• Playwright (optional, browser tests / challenge solve)
• curl_cffi (optional, tls_evasion)

Installation

Windows:

.\scripts\install.ps1
# uses .deep-venv

Linux/Mac:

chmod +x scripts/install.sh && ./scripts/install.sh
source .deep-venv/bin/activate

Manual: