+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: AI Pentest Tutorial (/showthread.php?tid=6330664)
AI Pentest Tutorial - blood69sucker - Aug 21, 2026
I’ve been experimenting with FastAPI and Ollama to simulate a white-hat security agent backend.
The workflow includes reconnaissance, vulnerability analysis, and reporting.
One useful trick: set "stream": false in Ollama’s API calls to avoid JSON parsing errors.
This setup helps me test my own websites safely before adding sensitive features like payment systems.
Has anyone else tried combining AI with security workflows?
RE: AI Pentest Tutorial - 01001 - Aug 22, 2026
Sounds interesting, as I've tried building my own set of templates which leverages all the frameworks to assess AI based applications. Although when you say workflows, are you referring N8N?
RE: AI Pentest Tutorial - desmondo - Aug 22, 2026
(Aug 21, 2026 12:39 PM)blood69sucker Wrote: I’ve been experimenting with FastAPI and Ollama to simulate a white-hat security agent backend.
The workflow includes reconnaissance, vulnerability analysis, and reporting.
One useful trick: set "stream": false in Ollama’s API calls to avoid JSON parsing errors.
This setup helps me test my own websites safely before adding sensitive features like payment systems.
Has anyone else tried combining AI with security workflows?
Which local model do you use?
RE: AI Pentest Tutorial - psycheuser - Aug 22, 2026
Solid setup mate. Setting stream to false saves a lot of headaches with JSON parsing when you are automation testing.
Personally prefer using LangChain or just custom python scripts over N8N for linking the recon tasks together, gives better control over the agent. Safe testing before payment integrations is definitely the way to go.
RE: AI Pentest Tutorial - los911 - Aug 27, 2026
I keep finding Qwen hallucinating vulnerabilities
RE: AI Pentest Tutorial - rspower - Oct 15, 2026
Here is a tool for Windows for automatic pen testing websites with local ai https://github.com/SLP-DEV1/PenX