██████╗ ██████╗ ██╗ ██╗ ██████╗ ██╗ ██████╗ ██╗
██╔═══██╗██╔══██╗███║███║██╔═████╗███║██╔═████╗███║
██║ ██║██████╔╝╚██║╚██║██║██╔██║╚██║██║██╔██║╚██║
██║ ██║██╔══██╗ ██║ ██║████╔╝██║ ██║████╔╝██║ ██║
╚██████╔╝██████╔╝ ██║ ██║╚██████╔╝ ██║╚██████╔╝ ██║
╚═════╝ ╚═════╝ ╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝
A terminal skill-tracker for pentesters and security engineers. Made by OB110101.
Track your progression across Active Directory, Web/AppSec, Exploit Dev, Malware Analysis, Cloud Security, AI Hacking, and any other offensive-security discipline you're building — from the terminal, with zero setup friction.
Most skill trackers are spreadsheets nobody opens twice. pentrack lives where you already are — the terminal — and is built specifically around how offensive security skills actually stack: some skills (like C) gate entire other trees (Reverse Engineering, Exploit Dev, Malware Analysis), so the tool tracks priority tiers, not just raw numbers, and gives you a reasoned focus order instead of a flat checklist.
- Skill board with progress bars, sorted by priority, level, or name
- Tiered, data-driven advice —
pentrack adviceexplains why something should come next, generated from your live data - Daily micro-tasks —
pentrack todaypicks your most-neglected priority skill and gives you one concrete thing to do - Goals with pace tracking — set a target level and date,
pentracktells you the weekly pace you need - Staleness detection — flags skills you haven't touched in N+ days so nothing quietly rots
- Time-windowed diffs — see what changed in the last week/month
- Charts — radar chart and progress-over-time graphs (PNG export)
- GitHub badge generator — drop your live skill board into your GitHub profile README
- HackTheBox integration — sync recent pwns and get suggested skill bumps based on machine tags
- Full history log — every change is timestamped
- Shell completion — bash and zsh
- Themeable — blue / orange / red / green / mono
git clone https://github.com/shenleeosialai/pentrack.git
cd pentrack
pipx install .
# or: pip install . --break-system-packagesThis installs a real pentrack command on your $PATH.
curl -O https://raw.githubusercontent.com/shenleeosialai/pentrack/main/pentrack.py
chmod +x pentrack.py
sudo mv pentrack.py /usr/local/bin/pentrackCharts (radar, graph) and HackTheBox sync are optional so the core tool has zero dependencies.
pip install pentrack[full] --break-system-packages # charts + HTB
pip install pentrack[charts] --break-system-packages # charts only
pip install pentrack[htb] --break-system-packages # HTB onlyIf you installed manually instead of via pip, just install the underlying libraries directly:
pip install matplotlib requests --break-system-packagesData lives at ~/.pentrack/skills.json and persists across reinstalls/updates.
pentrack show # your board, sorted by priority
pentrack focus # top-3 recommended targets right now
pentrack advice # full reasoning behind the tier ordering
pentrack today # one concrete task for todaypentrack show [--sort priority|level|name] [--json]
pentrack focus
pentrack advice
pentrack set <skill> <level> # 0-10, decimals allowed
pentrack inc <skill> [amount] # default 1
pentrack dec <skill> [amount]
pentrack add <skill> <level> [--note TEXT] [--tier N]
pentrack rm <skill>
pentrack note <skill> <text>
pentrack tier <skill> <0-5> # 0 = maintenance, 1 = highest priority
pentrack priority # view order
pentrack priority move <skill> <position> # reprioritize
pentrack goal set <skill> <target> --by YYYY-MM-DD
pentrack goal rm <skill>
pentrack goal # view goals + required pace
pentrack stale [--days N] # default 14
pentrack diff [--since 7d|4w|2m|YYYY-MM-DD] # default 7d
pentrack today
pentrack radar [--out file.png] # needs matplotlib
pentrack graph [skill] [--out file.png] # needs matplotlib
pentrack badges [--out file.md] # shields.io markdown
pentrack export [--format md|json] [--out file]
pentrack history [--limit N]
pentrack reset
pentrack theme <blue|orange|red|green|mono>
pentrack htb setup
pentrack htb sync [--apply]
pentrack htb stats
pentrack completion <bash|zsh>
pentrack inc "Active Directory" 1
pentrack set "C Programming" 3
pentrack note "AI Hacking" "started prompt injection labs"
pentrack priority move "C Programming" 1
pentrack goal set "Active Directory" 8 --by 2026-12-01
pentrack diff --since 30d
pentrack radar --out radar.png
pentrack badges --out badges.md# bash — add to ~/.bashrc
eval "$(pentrack completion bash)"
# zsh — add to ~/.zshrc
eval "$(pentrack completion zsh)"pentrack htb setup # prompts for an App Token (app.hackthebox.com/profile/settings) + account ID
pentrack htb sync # dry run — shows recent pwns and suggested skill bumps based on machine tags
pentrack htb sync --apply # actually applies the suggested bumps
pentrack htb stats # rank, points, owns, respectHTB credentials are stored locally at ~/.pentrack/config.json with restricted file permissions and are never transmitted anywhere except HackTheBox's own API.
pentrack ships with an opinionated default tier order for a pentest/red-team track:
- Active Directory / Pentesting — highest leverage for real engagements
- C Programming / Web-AppSec — C gates everything below it; Web/AppSec is needed everywhere
- Assembly / Reverse Engineering — unlocked once C is moving
- Exploit Development / Malware Analysis — compounds on tier 3
- Cloud Security / AI Hacking / Security Research — lower prerequisite barrier, good parallel tracks
- Maintenance — skills already solid, just keep them sharp
This is fully editable — pentrack tier and pentrack priority move reshape it to fit your own path. Run pentrack advice any time to see the current reasoning laid out.
Everything is stored locally in ~/.pentrack/. Nothing is sent anywhere except the optional, explicit HackTheBox API calls you trigger yourself with htb sync/htb stats. There's no telemetry.
Issues and PRs welcome — new skill categories, better HTB tag mapping, additional integrations (TryHackMe, CTFtime, cert tracking), and UX polish are all fair game.
If you're setting this repo up on GitHub, consider adding these topics under Settings → General → Topics so other pentesters can find it: pentesting, cybersecurity, cli-tool, red-team, active-directory, hackthebox, python.
MIT — see LICENSE.
Made by OB110101.