ramibot

Overview

RamiBot combines AI reasoning with cybersecurity tools through MCP protocol, featuring multi-LLM support, Docker integration, and a structured security skill pipeline. The platform offers controlled tool execution through MCP servers like rami-kali with 45+ pentesting tools. It includes unique features like evidence-locked reporting, tool approval gates, and Tor proxy management for comprehensive security operations workflows.

Try asking AI

After installing, here are 3 things you can ask your AI assistant:

• recon

  Security reconnaissance tool for port scanning, subdomain enumeration, and DNS queries

  Try:Scan target.com for open portsTry:Enumerate subdomains for example.orgTry:Perform DNS zone transfer for domain.com
• exploit

  Exploitation tool for running payloads and achieving remote code execution

  Try:Run an exploit against the vulnerable serviceTry:Generate and execute a payload for the identified vulnerabilityTry:Test for remote code execution on the target
• defense

  Security defense tool for hardening systems and mitigating threats

  Try:Harden the server against common vulnerabilitiesTry:Apply security patches to the identified servicesTry:Mitigate the detected attack vector
• analysis

  Security analysis tool for examining logs, traffic, and forensic data

  Try:Analyze the suspicious network trafficTry:Examine the log file for anomaliesTry:Perform forensic analysis on the captured pcap
• reporting

  Security reporting tool for generating structured security reports

  Try:Generate a security report of the findingsTry:Export the assessment results to PDFTry:Create an executive summary of the security assessment
• burp_expert

  Burp Suite integration for web application security testing

  Try:Analyze the web application with Burp SuiteTry:Test for SQL injection vulnerabilities in the target siteTry:Use Burp Intruder to fuzz the login form
• docker_terminal

  Access Docker container terminal for running commands

  Try:Run a command inside the Docker containerTry:Execute bash commands in the security environmentTry:Check the container's filesystem
• tor_proxy

  Manage Tor proxy connection for anonymous browsing

  Try:Start Tor proxy for anonymous browsingTry:Configure the system to use Tor proxyTry:Stop the Tor proxy connection
• cve_query

  Query CVE database for vulnerability information

  Try:Query for CVEs related to Apache 2.4Try:Find vulnerabilities affecting the target serviceTry:Check for known CVEs in the identified version
• skill_pipeline

  Automatically select and execute appropriate security skill based on context

  Try:Scan the network for vulnerabilitiesTry:Analyze the security logs for suspicious activityTry:Generate a report of the security assessment
• mcp_tool

  Execute MCP-integrated security tools

  Try:Run the nmap scan toolTry:Execute the Metasploit moduleTry:Run the Wireshark capture tool
• export_pdf

  Export security findings to PDF format

  Try:Export the security assessment as a PDF reportTry:Generate a PDF summary of the findingsTry:Create a document with all security recommendations

Note: Tools were inferred from the skill system documentation and feature descriptions. The README mentions MCP tool integration and various security tools but doesn't provide a complete list of MCP tool names with exact signatures. The tools lis

Comparable tools

Installation

git clone <repository-url>
cd ramibot

# Linux / macOS
bash install.sh

# Windows
install.bat

Compare ramibot with