LVL 5 agent class: offensive-security

Find the rift.
Open it. Cross through.

An AI agent that lives in your terminal. Set scope, task the agent, review findings, generate pentest reports. It runs real tools. You stay in control.

EARLY ACCESS v0.0.0 — raw, early, and evolving fast. the foundation is solid — come shape what's next.

TOOLS

RIFT STAGES

∞

MODELS

100%

AUDIT LOGGED

riftor · v0.0.2

[ R· I· F· T ]

❯

online scope: 0 finds: 0

model: anthropic/claude-sonnet-4-6

↑ INTERACTIVE · TYPE /help OR /demo ↑

DEPLOY

$ pip install riftor

$ git clone https://github.com/Estudely/riftor && cd riftor && uv sync && uv run riftor

Python 3.11+ · set ANTHROPIC_API_KEY, OPENAI_API_KEY, or OPENROUTER_API_KEY · local Ollama works too

MISSION STAGES 4 / 4 UNLOCKED

STG-01

R RECON MAP THE SURFACE

Discover hosts, ports, services. Find fault lines before they find you.

tool coverage 90%

nmapsubfinderhttpxdigwhatwebgobuster

STG-02

I INTRUSION OPEN THE RIFT

Identify the weakness. Exploit it. Get in.

tool coverage 80%

nucleiffufsqlmapnikto

STG-03

F FOOTHOLD HOLD POSITION

Post-exploitation. Persistence. Credential harvesting. Loot.

tool coverage 60%

shellspersistcreds

STG-04

T TAKEOVER OWN THE OBJECTIVE

Escalate. Move lateral. Complete the mission. Write the report.

tool coverage 40%

privesclateralreport

ACHIEVEMENTS UNLOCKED 5 / 5

SCOPE ENFORCER

Out-of-scope targets are hard-blocked. Every tool call checked. Override per-call only.

❯ /scope add 10.0.0.0/24

in-scope += 10.0.0.0/24

❯ nmap evil.com

⚠ BLOCKED — out of scope

PERMISSION GATES

Runs nmap, nuclei, ffuf, sqlmap for real. Dangerous ops need your approval.

ALLOW a SESSION s DENY esc

VULN HUNTER

CVSS v3.1 scoring. Records findings with severity, evidence, remediation. Generates reports.

CRIT HIGH MED LOW INFO

MODEL SWITCHER

Anthropic, OpenAI, OpenRouter, or local Ollama. Switch mid-session. Powered by litellm.

Anthropic OpenAI OpenRouter Ollama

SESSION KEEPER

Engagement state, scope, findings, conversation — all auto-saved to .riftor/. Resume with /resume, start fresh with /new. Themes: rift · void · fracture · singularity.

MISSION PROTOCOL

SET SCOPE /scope add 10.0.0.0/24 example.com

TASK THE AGENT "enumerate the web host and look for low-hanging fruit"

REVIEW /findings

REPORT /report → .riftor/reports/report-*.html

OPEN SOURCE · GPL-3.0

Authorized security testing only. Written permission required.

still early, still cooking — the core is locked in. grab it, break it, make it yours.

GITHUB $ pip install riftor

Find the rift. Open it. Cross through.

Find the rift.
Open it. Cross through.