Skip to content

peruz-a/ares

BranchesTags

Repository files navigation

ARES v3.0 - Autonomous Reconnaissance & Exploitation System

ARES is an advanced AI-powered autonomous reconnaissance and exploitation framework built in Go. It combines intelligent exploit generation, multi-provider LLM support, web search integration, and automated attack chaining for comprehensive security assessments.

Features

✅ Autonomous AI-powered attack agent - Auto-PWN with intelligent goal-based exploitation
✅ Advanced exploit generation & chaining - Adaptive PoC generation with evasion techniques
✅ Web vulnerability scanning - Fast concurrent port scanning with service detection
✅ Protocol brute-forcing - Custom protocol bruting with multiple backends
✅ GitHub tools auto-installer - Auto-download, install, and execute security tools
✅ Shodan/web search integration - Real-time intelligence gathering
✅ Multi-language PoC support - Python3, Bash, Go, Ruby, JavaScript
✅ Persistence & cleanup modules - Post-exploitation automation
✅ Multi-provider LLM fallback - OpenRouter, OpenAI, Anthropic, Groq, Cohere

Quick Start

Prerequisites

  • Go 1.25.5 or higher
  • Git
  • Bash shell

Local Installation

# Clone the repository
git clone https://github.com/peruz-a/ares.git
cd ares

# Install dependencies
go mod download
go mod verify

# Build ARES
go build -o ares ./cmd/ares

# Run ARES
./ares

Docker Deployment

# Build and run with Docker
docker build -t ares:latest .
docker run -it ares:latest

# Or use Docker Compose
docker-compose up -d
docker-compose exec ares bash

Configuration

API Keys Setup

Edit ares_config.ini and add your API keys in the [LLM_Providers] section:

[LLM_Providers]
OPENROUTER_API_KEY=sk-or-v1-xxxxxxxxxxxx
OPENAI_API_KEY=sk-xxxxxxxxxxxx
ANTHROPIC_API_KEY=sk-ant-xxxxxxxxxxxx
GROQ_API_KEY=gsk-xxxxxxxxxxxx
COHERE_API_KEY=xxxxxxxxxxxx

[API_SERVICES]
SHODAN_KEY=your_shodan_api_key
CENSYS_API_ID=your_censys_id
CENSYS_API_SECRET=your_censys_secret

[LLM_Settings]
OpenRouterModel=tngtech/deepseek-r1t2-chimera:free
ProviderTimeout=30
WebSearchEnabled=true

Or use environment variables:

export OPENROUTER_API_KEY="sk-or-v1-xxxxxxxxxxxx"
export SHODAN_API_KEY="your_api_key"

Commands Reference

Core Operations

# Autonomous attack agent
ares> auto-pwn <target> [goal]

# Fast concurrent port scanner
ares> scan <target> [ports]

# Offensive research assistant
ares> ai-chat <prompt>

# Custom protocol brute-force
ares> brute-force <target> <port> <protocol>

Exploit Chains (Advanced)

# List available vulnerabilities
ares> list-vulns

# Build custom exploit chain
ares> build-chain <goal>

# Auto-build privilege escalation
ares> privesc-chain

# Auto-build lateral movement
ares> lateral-chain

# Execute built chains
ares> exec-chain <target> [targets...] [reverse-shell-port]

Examples:

build-chain "full compromise"
privesc-chain
exec-chain 192.168.1.100 10.0.0.5 4444

AI-Powered Generation

# Generate adaptive PoC for CVE
ares> gen-poc <cve> [language]

# Generate custom security tools
ares> gen-tool <function> [language]

# Customize exploit for target
ares> adapt-exploit <exploit-id>

# Generate multi-language payloads
ares> gen-payload <type> [language]

Supported Languages: python3, bash, go, ruby, javascript

Built-in Features:

  • Multi-language support
  • Obfuscation & evasion
  • In-memory execution
  • Anti-forensics cleanup
  • Error recovery
  • Staged delivery

GitHub Tools Integration

# List available tools
ares> tools

# Auto-download & install tool
ares> install-tool <name>

# Remove tool
ares> uninstall-tool <name>

# Execute tool
ares> launch-tool <name>

Pre-configured Tools:

  • nuclei (vulnerability scanner)
  • ffuf (web fuzzer)
  • katana (web crawler)
  • sqlmap (SQL injection)
  • subfinder (subdomain enumeration)
  • metasploit-framework

Post-Exploitation

# Install crontab persistence
ares> persist

# Self-delete & shred traces
ares> cleanup

# XOR obfuscation
ares> crypto-xor <text>

Utilities

# Show command history
ares> history

# Re-execute previous command
ares> run-id <id>

# Exit ARES
ares> exit | quit

Usage Examples

Example 1: Basic Reconnaissance

ares> scan 192.168.1.100 80,443,3306

Scans specific ports on target, identifies services.

Example 2: Intelligence Gathering

ares> ai-chat What are the latest Apache RCE exploits?

Consults web intelligence for current exploit techniques.

Example 3: Generate Proof-of-Concept

ares> gen-poc CVE-2024-3156 python3

Generates a working proof-of-concept in Python with adaptive evasion.

Example 4: Autonomous Attack

ares> auto-pwn 192.168.1.100 "full compromise"

Launches AI-driven autonomous exploitation workflow.

Example 5: Exploit Chaining

ares> build-chain "privilege escalation"
ares> exec-chain 192.168.1.100 10.0.0.5 4444

Builds and executes a privilege escalation chain.

Example 6: Tool-Based Scanning

ares> launch-tool nuclei -target example.com &
ares> launch-tool ffuf -u http://example.com/FUZZ &

Parallel execution of multiple security tools.

Web Search & Multi-Provider LLM Integration

Features

ARES includes comprehensive web search integration and automatic fallback support for multiple LLM providers:

  • Real-time web information during exploit development, PoC generation, and AI analysis
  • Automatic provider switching if one fails
  • Multiple LLM providers for redundancy and flexibility

Web Search Integration

Web search is integrated into:

  • AI Chat - Enriches AI responses with current web data
  • PoC Generation - Searches for latest exploit info before generating
  • Exploit Customization - Finds latest adaptation and evasion techniques
  • Tool Generation - Searches for tool implementation best practices
  • Auto-PWN - Service analysis with current vulnerability info

Supported LLM Providers

  1. OpenRouter (Default) - Free models available
  2. OpenAI - GPT-3.5-turbo and later
  3. Anthropic - Claude models
  4. Groq - Fast inference with Mixtral
  5. Cohere - Command model

Provider Fallback Logic

The system automatically handles provider failures:

[*] Attempting to use OpenRouter provider...
[-] OpenRouter provider failed: connection timeout
[*] Trying next provider...
[*] Attempting to use OpenAI provider...
[+] Successfully used OpenAI provider

Architecture

Project Structure

ares/
├── cmd/ares/              # CLI application
├── internal/
│   ├── ai/               # LLM providers & web search
│   ├── agent/            # Autonomous attack agent
│   ├── scanner/          # Network & protocol scanners
│   ├── exploits/         # Exploit database & executor
│   ├── tools/            # GitHub tool manager
│   ├── reporting/        # Report generation
│   ├── post/             # Post-exploitation modules
│   ├── config/           # Configuration management
│   └── evasion/          # Obfuscation & evasion
├── ares_config.ini       # Configuration file
├── Dockerfile            # Docker configuration
├── docker-compose.yml    # Docker Compose setup
└── go.mod               # Go module definition

Provider Chain Architecture

ProviderChain (Main interface)
├── OpenRouterProvider
├── OpenAIProvider
├── AnthropicProvider
├── GroqProvider
└── CohereProvider

Each provider implements:

  • Chat(prompt string) (string, error)
  • Name() string

Troubleshooting

Build Issues

Error: "command not found: go"

# Install Go from https://golang.org/dl/
go version  # Verify installation

Error: Missing dependencies

go mod tidy && go mod download

Error: Build fails

go clean -cache
go build -o ares ./cmd/ares

Runtime Issues

Error: "no LLM providers configured"

  • Add at least one API key to ares_config.ini or set environment variables
  • Verify the key is not empty

Error: "all providers failed"

  • Check API keys are correct and valid
  • Verify internet connectivity
  • Check provider API status
  • Increase timeout value if needed

Error: "User not found" (OpenRouter 401)

  • Verify your OpenRouter API key is correct
  • Ensure the key is set in ares_config.ini or environment variable
  • Check that OPENROUTER_API_KEY is not empty

Web Search Not Working

  • Check internet connectivity
  • DuckDuckGo should be accessible from your network
  • No VPN restrictions blocking the search

Best Practices

Security

  1. API Key Security: Never commit API keys to version control

    • Use environment variables in production
    • Keep ares_config.ini in .gitignore

  2. Cost Optimization:

    • OpenRouter free models are cost-effective
    • Set timeout appropriately (default: 30 seconds)
    • Use faster models for time-sensitive operations

Performance

  1. Web Search Optimization:

    • The system performs smart searches with relevant keywords
    • Results are automatically deduplicated
    • Search queries include specific CVE/software names

  2. Provider Selection:

    • OpenRouter for cost-free options
    • OpenAI for high-quality responses
    • Groq for fast inference
    • Anthropic for safer, more controlled outputs

System Requirements

  • Go Version: 1.25.5 or higher
  • Memory: 512MB minimum (1GB+ recommended)
  • Storage: 500MB for tools and generated artifacts
  • Network: Internet access for web search and LLM providers

Features Highlights

Intelligence Gathering

  • Real-time web search (DuckDuckGo integration)
  • Shodan API integration
  • Threat intelligence from AI models
  • Custom search capabilities

Vulnerability Management

  • 10+ critical CVEs in database
  • CVSS scoring (0-10)
  • Exploitability ratings
  • Dependency tracking

Exploit Generation

  • Multi-language support
  • Obfuscation techniques
  • Evasion methods
  • Error handling
  • Staged delivery

Tool Management

  • Auto-download from GitHub
  • Version tracking
  • Dependency resolution
  • Auto-launch in chains

Performance Notes

  • Web search adds ~2-5 seconds per request (depends on network)
  • Most providers respond within 10-20 seconds
  • Total request time: ~15-30 seconds per operation
  • Can be disabled in config if preferred

Support & Documentation

License

ARES v3.0 - Offensive Security Tool

Version

Current Version: 3.0
Language: Go (1.25.5+)
Type: Autonomous Reconnaissance & Exploitation System

All commands are logged and can be repeated with run-id <id>

About

No description, website, or topics provided.

Resources

Readme
Activity

Stars

0 stars

Watchers

0 watching

Forks

0 forks
Report repository

Releases

No releases published

Packages

No packages published

Contributors 2

  •  
  •  

Languages