← Discover MCPs and Agents
P
AgentAI & MLGitHub

PHANTOM

👻 AI-Powered Pentesting Command Center — Autonomous security testing with real-time streaming, self-improving AI, unlimited tool iterations,

Links

README

From the repo.

👻 PHANTOM

AI-Powered Pentesting Command Center

CI Node.js License Platform PRs Welcome Hlido trust score

An autonomous AI assistant for penetration testing, security research, and general-purpose tasks.
Real-time tool execution • Unlimited autonomous operations • Self-improving AI • Beautiful dark UI


⚡ Installation (Linux / macOS / Windows)

Install PHANTOM and configure the phantom CLI command across any terminal in a single command:

Linux & macOS (Bash/Zsh/Fish/etc.):

curl -fsSL https://raw.githubusercontent.com/OmYarewar110/PHANTOM/main/install.sh | bash

Windows (PowerShell):

iwr -useb https://raw.githubusercontent.com/OmYarewar110/PHANTOM/main/install.ps1 | iex

Once installed, launch PHANTOM from any terminal window instantly:

# 🚀 Launch PHANTOM server
phantom start

# 💻 Launch in development mode (Backend + Vite UI)
phantom dev

# 🔌 Specify custom port
phantom start --port 8080

# ❓ View CLI menu & options
phantom --help

Open http://localhost:1337 (or http://localhost:5173 in dev mode) in your browser.


👩‍💻 Developer Setup (Manual Installation)

For developers contributing to PHANTOM or customizing the codebase:

# 1. Clone the repository
git clone https://github.com/OmYarewar110/PHANTOM.git
cd PHANTOM

# 2. Install dependencies
npm install

# 3. Configure environment
cp .env.example .env

# 4. Start development mode
npm run dev

# 5. Run test suite
npm test

🤔 Why PHANTOM?

  • Zero-Config Tool Execution: Tools automatically install system dependencies and parse outputs cleanly, so the AI never gets stuck missing a library.
  • Unbounded Agent Loops: Unlike standard chat UIs, PHANTOM allows the LLM to call tools recursively until the goal is achieved without needing constant human prompting.
  • Persistent Context: The integrated SQLite memory store gives your agent long-term recall across sessions, preventing repetitive scanning or reconnaissance.

✨ Features

FeatureDescription
🛡️ Multi-Agent DefenseOrchestrator, Planner, and Specialist Agents (Log, Compliance, Threat Modeler) working in parallel via Task Graphs
🤖 Any LLM BackendOpenAI, OpenRouter, Ollama, LM Studio, DeepSeek, Claude — any OpenAI-compatible API
⚡ Real-Time StreamingLive tool execution output, typing animations, and AI thinking display
🔓 Unlimited OperationsNo tool call limits — PHANTOM runs autonomously until the task is done
🧠 Self-ImprovingCreates its own tools, saves execution traces, learns from past runs
🔑 Secure SudoOne-time sudo password with system validation — persisted securely
📁 Workspace SystemConfigurable workspace directory for scripts, reports, and file operations
🧩 MCP Server HubNative Model Context Protocol infrastructure supporting typed JSON schemas and rate-limited endpoints
📦 Skills SystemTrust-tiered SKILL.md packages utilizing isolated-vm sandboxing
🌐 Web ResearchBuilt-in web search and webpage scraping for real-time information
🕷️ Scrapling IntegrationAnti-bot bypass, Cloudflare solving, JS rendering via Scrapling
💾 Semantic MemoryLocal Vector Search (@xenova/transformers) paired with standard FTS
🛑 Emergency StopInstant abort button to halt any running operation
🎨 Premium Dark UIIncludes live animated Canvas graph of multi-agent communication
🌐 Internet CrawlingZero-config web reading, YouTube subtitles, RSS feeds, V2EX via Agent Reach integration

⚙️ Configuration

Edit .env or configure via the Web UI Settings panel:

# OpenAI
API_BASE_URL=https://api.openai.com/v1
API_KEY=sk-your-key-here
MODEL_ID=gpt-4o

# OpenRouter (access to 100+ models)
API_BASE_URL=https://openrouter.ai/api/v1
API_KEY=sk-or-your-key-here
MODEL_ID=deepseek/deepseek-chat

# Ollama (local, free)
API_BASE_URL=http://localhost:11434/v1
API_KEY=ollama
MODEL_ID=llama3

🐳 Docker Deployment

Run PHANTOM in a containerized environment using Docker Compose:

docker compose up --build

Open http://localhost:3000 in your browser.

🏗️ Architecture

PHANTOM/
├── bin/                    # PHANTOM CLI executable script (phantom)
├── install.sh              # 1-line curl installer script
├── server/                 # Backend (Express + WebSocket)
│   ├── ai/
│   │   ├── llm-client.js   # LLM communication & streaming
│   │   └── system-prompt.js # Dynamic system prompt builder
│   ├── tools/
│   │   ├── executor.js      # Tool execution engine (25 tools)
│   │   └── registry.js      # Tool definitions for function calling
│   ├── memory/
│   │   └── store.js         # SQLite persistence layer
│   ├── banner.js            # Colorful ANSI terminal banner
│   ├── config.js            # Configuration management
│   └── index.js             # Server entry point
├── frontend/               # Frontend (Vanilla JS + Vite)
│   ├── css/styles.css       # Dark theme design system
│   ├── js/
│   │   ├── app.js           # Main controller & WebSocket
│   │   ├── chat.js          # Chat rendering & animations
│   │   └── settings.js      # Settings panel
│   └── index.html           # Main page
├── workspace/              # AI workspace (scripts, reports, skills)
├── .env.example            # Configuration template
├── vite.config.js          # Vite dev server config
└── package.json

🛠️ Available Tools

PHANTOM has 25 built-in tools that the AI uses autonomously:

ToolPurpose
execute_commandRun shell commands with auto sudo injection
read_fileRead file contents
write_fileWrite/create files
list_directoryList directory contents
install_toolAuto-install packages (apt/pacman/pip/npm/go/cargo)
web_requestHTTP requests for recon & API testing
search_webWeb search via DuckDuckGo
scrape_webpageFetch & parse webpage content
scrapling_fetchAdvanced scraping — anti-bot bypass, Cloudflare, JS rendering (Scrapling)
python_executeExecute Python code directly
save_memoryStore findings to AgentMemory engine (4-tier taxonomy)
recall_memoryHybrid RRF search across persistent memory
get_memory_statsGet AgentMemory Engine stats & top-recalled items
edit_source_codeSelf-modify PHANTOM's own code
save_traceLog execution traces for self-optimization
jina_read_urlRead any URL as clean Markdown
youtube_searchSearch YouTube videos
youtube_get_subtitlesExtract YouTube video subtitles/transcripts
rss_read_feedRead any RSS/Atom feed
v2ex_browseBrowse V2EX tech community
reddit_crawlReddit search and post/thread reading
linkedin_crawlLinkedIn posts, jobs, and article reading

🧪 Testing

Run the Vitest test suite:

npm test

📄 License

This project is licensed under the MIT License — see the LICENSE file for details.

⚠️ Disclaimer

PHANTOM is designed for authorized security testing only. Always obtain proper authorization before testing any systems. The developers are not responsible for misuse of this tool.


Built with 🖤 for the security community

Collected info

  • ★ 66 stars
  • ⎇ 9 forks
  • Language: JavaScript
  • Source updated: 9/22/2026