☠ PHANTOM

<div align="center">

<br/>

# ☠ PHANTOM

### Autonomous Adversary Simulation Platform

*AI-native penetration testing — autonomous reconnaissance, exploitation, and verified results.*

<br/>

[![PyPI](https://img.shields.io/pypi/v/phantom-agent?style=for-the-badge&logo=pypi&logoColor=white&label=phantom-agent&color=dc2626)](https://pypi.org/project/phantom-agent/)
[![Python](https://img.shields.io/badge/Python-3.12+-3776AB?style=for-the-badge&logo=python&logoColor=white)](https://python.org)
[![License](https://img.shields.io/badge/License-Apache%202.0-4DB6AC?style=for-the-badge)](LICENSE)
[![Docker](https://img.shields.io/badge/Docker-Sandbox-2496ED?style=for-the-badge&logo=docker&logoColor=white)](#architecture)
[![Tools](https://img.shields.io/badge/Security%20Tools-53-dc2626?style=for-the-badge)](#tools)
[![Status](https://img.shields.io/badge/Status-Beta-F39C12?style=for-the-badge)](#)
[![Platform](https://img.shields.io/badge/Platform-Linux%20|%20macOS%20|%20Windows-555555?style=for-the-badge&logo=linux&logoColor=white)](#quick-start)

<br/>

[**Quick Start**](#quick-start) &nbsp;·&nbsp; [**Architecture**](#architecture) &nbsp;·&nbsp; [**Usage**](#usage) &nbsp;·&nbsp; [**Configuration**](#configuration) &nbsp;·&nbsp; [**Contributing**](#contributing)

<br/>
</div>

---

## Overview

Phantom is an **autonomous AI penetration testing agent** built on the ReAct (Reason–Act) loop. It connects a large language model to over 30 professional security tools, runs all offensive operations inside an isolated Docker sandbox, and produces verified vulnerability reports — entirely without human intervention.

Unlike CVE-signature scanners, Phantom **reasons** about your target: it reads HTTP responses, forms hypotheses, selects the right tool, chains multi-step exploits, then writes and executes a proof-of-concept script to confirm every finding before it appears in a report.

| | Traditional Scanners | **Phantom** |
|--|--|--|
| **Approach** | Signature matching against CVE databases | LLM reasoning + adaptive tool chaining |
| **False Positives** | 40–70% — requires manual triage | Every finding verified with a working PoC |
| **Depth** | Single-pass HTTP probe | Multi-phase: recon → exploit → verify |
| **Adaptability** | Fixed rules, static payloads | Adapts to target responses in real time |
| **Novel Vulns** | Known CVEs only | Logic flaws + novel attack paths |
| **Reporting** | Generic vulnerability lists | MITRE ATT&CK mapped, compliance-ready |

---

## Core Capabilities

<table>
<tr>
<td align="center">🧠</td>
<td><strong>Autonomous ReAct Loop</strong> — Plans, executes tools, reads results, re-plans. Handles dead ends and unexpected responses without human guidance.</td>
</tr>
<tr>
<td align="center">🔧</td>
<td><strong>53 Security Tools</strong> — nmap · nuclei · sqlmap · ffuf · httpx · katana · subfinder · nikto · gobuster · arjun · semgrep · playwright — all orchestrated automatically.</td>
</tr>
<tr>
<td align="center">🐳</td>
<td><strong>Ephemeral Docker Sandbox</strong> — All offensive tooling runs in a network-restricted Kali Linux container. Zero host filesystem access. Container is destroyed after every scan.</td>
</tr>
<tr>
<td align="center">⚡</td>
<td><strong>Multi-Agent Parallelism</strong> — Spawns specialized sub-agents (SQLi, XSS, recon) that work concurrently and report findings to the coordinator.</td>
</tr>
<tr>
<td align="center">🛡️</td>
<td><strong>7-Layer Defense Model</strong> — Scope guard → Tool firewall → Docker sandbox → Cost limiter → Time budget → HMAC audit trail → Output sanitizer.</td>
</tr>
<tr>
<td align="center">✅</td>
<td><strong>Verified Findings Only</strong> — No hallucinations. Every reported vulnerability includes raw HTTP evidence, reproduction steps, and a working exploit script.</td>
</tr>
<tr>
<td align="center">🗺️</td>
<td><strong>MITRE ATT&CK Enrichment</strong> — Automatic CWE, CAPEC, technique-level tagging, and CVSS 3.1 scoring per finding.</td>
</tr>
<tr>
<td align="center">📋</td>
<td><strong>Compliance Coverage</strong> — OWASP Top 10 (2021) · PCI DSS v4.0 · NIST 800-53 — mapped automatically per finding.</td>
</tr>
<tr>
<td align="center">💾</td>
<td><strong>Knowledge Persistence</strong> — Cross-scan memory stores hosts, past findings, and false-positive signatures. Each scan learns from the last.</td>
</tr>
<tr>
<td align="center">💰</td>
<td><strong>Full Cost Control</strong> — Per-request and per-scan budget caps. Every token and every dollar tracked in real time.</td>
</tr>
</table>

---

## Architecture

<details open>
<summary><strong>① System Architecture — Component Overview</strong></summary>
<br/>

```mermaid
%%{init: {"theme": "dark"}}%%
flowchart TD
    USER(["👤 User / CI-CD"])

    subgraph IFACE["Interface Layer"]
        CLI["CLI · TUI"]
        PARSER["Output Parser"]
    end

    subgraph ORCH["Orchestration"]
        PROFILE["Scan Profile"]
        SCOPE["Scope Guard"]
        COST["Cost Controller"]
        AUDIT["HMAC Audit 

... (truncated)