This repository contains example output produced by the VirtueWebAgent AI penetration testing tool. It is intended to show what the tool produces, not to serve as a usable scan of any live system.
The full tool is published at https://github.com/VirtueSecurity/VirtueWebAgent — see that repository for documentation, installation, and usage.
Note
This is a point-in-time snapshot generated by a specific version of VirtueWebAgent. Output format, file layout, and findings will differ in other versions. Refer to the main repository for the current behavior.
- OopsSec Store (June 2026) —
aioopssecstore202606/ - Zero Health (June 2026) —
zero-health-2026-06/
The tool works in phases, and the output is organized accordingly:
findings/phase1/— authentication: login automation, session capture, and screenshots.findings/phase2/— reconnaissance: authenticated/unauthenticated crawl, API capture, endpoint and feature inventory, and WAF fingerprinting.findings/phase3/— vulnerability discovery and exploitation: per-category findings, exploit attempts, evidence, and confirmed-vulnerability reports.
Supporting artifacts include project.json (target configuration), the crawled
client-side source under javascript_source/, and helper scripts under scripts/.
For the tool itself, how it works, and how to run your own assessments, visit https://github.com/VirtueSecurity/VirtueWebAgent.