Mind of a Hacker is an advanced, automated web application reconnaissance and vulnerability assessment platform featuring an integrated AI-driven remediation engine. Built with a sleek, immersive modern GUI using CustomTkinter, it bridges the gap between identifying critical web flaws and executing immediate, production-ready fixes.
- Automated Reconnaissance: Passive and active domain intelligence compilation including WHOIS mapping, IP resolution, and server technology detection.
- Intelligent Web Crawling & Scanning: Comprehensive analysis mapping endpoint hierarchies and diagnosing vulnerabilities (such as OWASP Top 10 baselines like SQLi, XSS, and CSRF misconfigurations).
- AI-Powered Remediation: Leverages GPT-4 (with a robust local rule-based static fallback engine) to generate precise, copy-pasteable server configuration tweaks and code patches.
- Local Project Management: Powered by an embedded SQLite3 database backend to persist project scan history, target logs, and detailed vulnerability tracking.
- Professional Reporting: Exportable audit results built directly into clean PDF documentation templates.
The application is structured into modular components ensuring high stability and logical separation:
main.py(GUI Dashboard): Implements an intuitive multi-tab interface using moderncustomtkinterlayouts, synchronous multi-threaded execution to prevent window freezing, and rich dynamic cards for flaw analysis.ai_remediator.py: Handles the formatting of security recommendations, interacting with the OpenAI API or falling back to standard structural fix guidelines.database.py: Standard relational schema storing individual execution scopes inside localProjectsand sequential metadata tracking tables.
- Python 3.10 or higher
- Pip package manager
git clone [https://github.com/MIND-OF-A-HACKER/Website-pentester.git](https://github.com/MIND-OF-A-HACKER/Website-pentester.git)
cd Website-pentester
2. Install Required Dependencies
Ensure all application requirements are configured correctly:
Bash
pip install customtkinter openai requests beautifulsoup4
(Note: If your scanner utilizes network utilities, ensure system components such as Nmap are natively available in your environment path variables).
3. Environment Configuration (Optional)
To unlock full GPT-4 context-aware remediation suggestions, set up your OpenAI API Key as an environment variable:
Linux/macOS: export OPENAI_API_KEY="your_api_key_here"
Windows (CMD): set OPENAI_API_KEY="your_api_key_here"
📝 How to Use
Launch the Interface: Run the core executable file to spin up the Tkinter dashboard:
Bash
python main.py
Start a Scan: Enter any target domain or standard web address (e.g., https://example.com) directly into the console input prompt at the bottom.
Analyze & Fix: Once the multi-threaded scanning workflow completes, browse through discovered vulnerabilities sorted systematically by severity. Click "Get Complete Fix" to view production-ready mitigations or server architecture hardening layouts.
Generate Report: Export comprehensive audit findings directly into an offline PDF deliverable document.
⚖️ Disclaimer
This tool is designed purely for authorized security auditing, academic research, and defensive application hardening. Always obtain written consent from target owners prior to conducting infrastructure evaluations.