RedPick Agentic Pentesting Platform¶

Welcome to the documentation for RedPick — an automated web & mobile application penetration testing suite powered by Claude Code.

The Codebase is the AI¶

Unlike traditional software, this platform is primarily composed of structured instructions that AI agents execute autonomously. The "source code" is natural language orchestration.

The remaining 56% (~176K lines) is the dashboard (React + FastAPI), desktop app (Flutter), docs site, eval framework, ingestion pipeline, report engine, and scripts.

Knowledge Arsenal — 1,248 Techniques Across 34 Knowledge Packs¶

Every vulnerability class is backed by a curated knowledge pack containing real-world techniques, payloads, bypass patterns, and PoC chains — sourced from 162 HackerOne disclosed CVEs, 68 security researcher videos, and 121 published research papers.

Key Features¶

• 6-Phase Methodology — Context init, walkthrough, recon, discovery, scanning, manual testing, verification, reporting
• Micro-Agent Architecture — Parallel wave execution with 31 sub-agents across 10 scoped skills
• V3 Pragmatica Model Routing — 3-tier Opus/Sonnet/Haiku assignment with per-scope thinking budgets
• Smart Test Router — Maps each endpoint to only relevant test scopes via 18+ signal rules
• CI/CD Code Review — Automated SAST + AI analysis on every PR (GitHub, GitLab, Azure DevOps)
• Docker-Only Execution — All pentest tools run inside containers, never on the host
• Professional Reporting — Contextual risk scoring, CVSS 4.0, HWG compliance format

Quick Start¶

/pentest https://target.com                    # Full pentest (stealth ON)
/pentest https://target.com --fast             # Fast mode (no recon, no stealth)
/pentest https://target.com --bug-bounty       # Bug bounty (aggressive)
/pentest https://api.target.com --api-spec auto # API direct testing

6-Phase Methodology Flow¶

graph LR
    A["Phase 0<br/>Context Init"] --> B["Phase 0.5<br/>Walkthrough"]
    B --> C["Phase 1<br/>Recon"]
    C --> D["Phase 2<br/>Discovery"]
    D --> E["Phase 3<br/>Scan"]
    E --> F["Phase 3.5<br/>Smart Routing"]
    F --> G["Phase 4<br/>Testing<br/>31 Sub-agents"]
    G --> H["Phase 5<br/>Verification"]
    H --> I["Phase 6<br/>Report"]

    style A fill:#4a148c,color:#fff
    style B fill:#6a1b9a,color:#fff
    style C fill:#7b1fa2,color:#fff
    style D fill:#8e24aa,color:#fff
    style E fill:#9c27b0,color:#fff
    style F fill:#ab47bc,color:#fff
    style G fill:#0277bd,color:#fff
    style H fill:#00838f,color:#fff
    style I fill:#00695c,color:#fff

Documentation Structure¶