dsh-pentester
Multi-agent PTES penetration testing orchestrator for DeepSeek Harness with Docker/Kali sandbox execution.
Install
$ dsh plugin --profile web add dsh-pentester@latestPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Root-Orchestrator architecture driving multi-agent workflows across all standard PTES phases
- Isolated execution through Docker (local socket or remote daemon) and SSH runtime toolboxes
- Integration with 19 built-in specialist agents and custom skill sets via DSH Native Skill Runtime V4
- Comprehensive MCP connectivity supporting STDIO, Streamable HTTP, and Legacy SSE (direct PortSwigger Burp MCP support)
- Interactive UI dashboards featuring PTES pipelines, asset maps, trace topology, finding trackings, and deliverable reports
Useful For
- Authorized penetration testing and red-teaming operations across web and network targets
- Automated vulnerability reconnaissance, verification, and technical report drafting
- CTF competition challenges, security laboratory exercises, and white-box code security audits
Who It Fits
- Penetration testers and red team consultants
- Security engineers and vulnerability researchers
- Cybersecurity students and CTF competitors
Documented Limitations
- Strictly intended for authorized assessments; built-in RoE and approval prompts do not provide technical or legal guarantees against misuse
- Requires DeepSeek Harness host version >=0.2.0-rc.1 <0.3.0
- Requires a Docker daemon with the Kali toolbox image or an SSH target configured for execution tools
- Builtin Skill Pack is downloaded separately from GitHub releases rather than bundled directly into the npm registry package
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 12 runtime, 40 development, 12 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as NOASSERTION.
A root package.json was captured and can be inspected by the registry.
package.json declares a prepare lifecycle script that may run during relevant package installation workflows.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- fb0sh/dsh-pentester
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin Bundle
- Source checked
- 1c69c8e · 2026-10-23
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 67GitHub stars
- Forks
- 12
- Open issues
- 0
- Last commit
- 2026-10-14
- Last release
- 2026-10-14
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Persistent multi-model agent teams with dynamic DAG orchestration, run monitoring, and token insights for DeepSeek Harness.
View plugin →Full office suite integration for DeepSeek Harness supporting spreadsheets, docs, slides, bases, and canvases.
View plugin →Vision routing and pixel-level tools for text-only DeepSeek Harness agents with built-in free fallback.
View plugin →Self-hosted AI agent runtime and MCP bridge providing sandboxed execution, memory, and audit logs.
View plugin →