🛡️ MINA - AI Smart Pentester

An AI-Powered Security Scanner with Automated Defense Strategies

MINA (Minimalistic Intelligent Network Agent) is a lightweight pentesting assistant that combines rule-based vulnerability detection with AI-powered analysis and defensive recommendations.

---

✨ Features

🚀 Smart Vulnerability Detection

• Hybrid scanning: Rule-based + AI verification
• Detects: SQL Injection (SQLi), XSS, Path Traversal
• Configurable timeout & AI toggle

🛡️ Defensive Recommendations

• AI-generated mitigation strategies
• Practical, implementable remediation steps
• Contextual vulnerability explanations

💻 Dual Interface

• Interactive CLI menu
• Traditional command-line mode
• Rich terminal output with progress tracking

📊 Reporting

• Auto-generated JSON reports
• Scan & mitigation logs
• Color-coded vulnerability summaries

---

📸 Screenshots

🔍 CLI Mode

🚀 Use Cases

• Security Students & Researchers → Learn basics of vulnerability detection (SQLi, XSS, Path Traversal).

• Developers → Quickly scan personal apps before deploying.

• Consultants → Use as a lightweight pentesting assistant for demos.

• Bug Bounty Hunters → Rule-based + AI-powered anomaly checks for fast triage.

🛠️ Tech Stack

• Language: Python 3.10+

• Libraries:

         requests → HTTP requests & payload injection
  
         BeautifulSoup → Response parsing
  
         tenacity → Retry handling for stable scans
  
         json → Report generation
  
         rich → Beautiful CLI output
  
         AI/LLM : Ollama (Phi model) for anomaly detection & mitigation generation
  

⚡ Quick Start

Clone the repo

   git clone https://github.com/yokodrea/Mina.git
   cd Mina

Install dependencies

   pip install -r requirements.txt

Run CLI

   python main.py

🔮 Future Enhancements

🧩 Modular Plugin System → Add custom vulnerability tests.

🌐 Expanded Vulnerability Coverage → CSRF, SSRF, Command Injection, etc.

🤖 Multi-Model AI Analysis → Integrate GPT, Llama, or custom fine-tuned models.

📊 Dashboard → Rich visualization of scan results & risk scoring.

☁️ Cloud Mode → Centralized scanning with API support for teams.

🔑 Authentication Support → Handle login-protected endpoints.

🧪 Requirements

📌 To be filled in once final dependencies are set. 👉 See requirements.txt for more info.

📄 License

This project is licensed under the MIT License.