pencheff 0.2.0__tar.gz

pencheff-0.2.0/.claude-plugin/plugin.json

@@ -0,0 +1,39 @@
+{
+  "name": "pencheff",
+  "version": "0.1.5",
+  "description": "Elite AI penetration tester that doesn't just scan — it HACKS. Verifies and exploits every finding, chains vulnerabilities into attack narratives, and proves impact with proof-of-concept demonstrations. 32 advanced tools: reconnaissance, WAF detection, injection testing, auth/authz attacks, HTTP smuggling, cache poisoning, deserialization, OAuth/OIDC exploitation, WebSocket attacks, MFA bypass, subdomain takeover, 116 external tools via run_security_tool. Exports reports to Word (.docx), CSV, and JSON with verification status (true positive, false positive, etc.). Manual hacking with test_endpoint between scans. Eliminates false positives. Focuses on exploitable vulnerabilities with verified PoCs.",
+  "author": {
+    "name": "Bala Sriharsha",
+    "url": "https://github.com/balasriharsha"
+  },
+  "homepage": "https://github.com/balasriharsha/pencheff",
+  "keywords": [
+    "security",
+    "penetration-testing",
+    "pentest",
+    "vulnerability",
+    "exploitation",
+    "owasp",
+    "sqli",
+    "xss",
+    "ssrf",
+    "api-security",
+    "web-security",
+    "jwt",
+    "cors",
+    "cloud-security",
+    "http-smuggling",
+    "cache-poisoning",
+    "deserialization",
+    "prototype-pollution",
+    "oauth",
+    "mfa-bypass",
+    "websocket",
+    "subdomain-takeover",
+    "waf-bypass",
+    "race-condition",
+    "idor",
+    "privilege-escalation",
+    "proof-of-concept"
+  ]
+}

pencheff-0.2.0/.gitignore

@@ -0,0 +1,9 @@
+__pycache__/
+*.py[cod]
+*.egg-info/
+dist/
+build/
+.venv/
+*.egg
+.eggs/
+.claude/

pencheff-0.2.0/.mcp.json

@@ -0,0 +1,8 @@
+{
+  "mcpServers": {
+    "pencheff": {
+      "command": "uv",
+      "args": ["run", "--project", "${CLAUDE_PLUGIN_ROOT}", "python", "-m", "pencheff"]
+    }
+  }
+}