I work a 12-hour job, 72-hour weeks — and I still come home and write code. Not for a paycheck, not for a startup, for the commons. Every tool I ship is free, single-file, and built to out-perform the commercial product someone's charging a subscription for.
If a well-funded company sells it, I want the free version to be better. That's the whole thesis — and here's the proof.
A fully autonomous, black-box AI penetration-testing agent that runs as a desktop app (GTK4 / libadwaita) on your own Kali Linux box — with real hands on the machine through tools. It plans, attacks, and verifies every exploit with an out-of-band oracle before it claims a win. No hallucinated findings. If Basilisk says it popped something, it proved it.
⚔️ Benchmarks — fully autonomous, black-box
| Target | 🐍 Basilisk | Cascade | Claude Opus 4.8 |
|---|---|---|---|
| OWASP Juice Shop | 87 / 113 | 36 | 23 |
| Escape "Duck Store" API | 22 / 22 | — | — |
| OWASP class coverage | 14 / 14 | — | — |
💥 The part that matters: every one of those scores was produced driving DeepSeek-V4-Flash — one of the cheapest models on the market. The commercial agents it beats run on far pricier frontier models. The score comes from the verified-exploitation scaffolding, not from renting an expensive brain. A free tool on a budget model, out-scoring the paid ones. That's the point.
🔧 Under the hood
Built for operators, not servers.
⚡ Install (one line):
curl -fsSL https://raw.githubusercontent.com/the-priest/Basilisk/main/install.sh | bash
⚠️ Authorized targets only. This is an offensive tool — run it on systems you own or have written permission to test.
🧭 Not the LLM-jailbreak framework, not White-Basilisk, not a browser, not Roko's. This Basilisk is a security agent.
Basilisk is the flagship, not the whole shop. I build and maintain a broader suite of AI-powered security and Linux tooling — single-file, free, and running on real hardware (Kali / NetHunter).
Keywords: open source security tools, kali linux, offensive security, autonomous ai pentester, ai agent, personal ai assistant, penetration testing, nethunter, verified exploitation, free pentest tool, linux automation, gtk4 security app, deepseek pentest agent.