Repository navigation
PenX v0.6.0
Windows + Kali/Linux — our first cross-platform release. PenX brings authorized security reconnaissance, local AI-assisted review, and evidence-based reports to both platforms from one shared codebase.
Download PenX
| Platform | Edition | Download |
|---|---|---|
| Windows 10/11 (x64) | Installer — recommended | PenX-Setup-x64.exe |
| Windows (x64) | Portable ZIP | PenX-Windows-x64.zip |
| Kali / Debian / Ubuntu (amd64) | Debian package | penx_0.6.0_amd64.deb |
| Linux (x86-64) | Portable archive | PenX-Linux-x86_64.tar.gz |
Verify the downloads: Windows SHA-256 checksums · Linux SHA-256 checksums.
GitHub's automatically generated Source code (zip/tar.gz) archives are not the ready-to-run application. Third-party scanners (including Nmap/Npcap) and AI model weights are not bundled. Prebuilt ARM64 packages are not included.
What's new in v0.6.0
- Linux and Kali support: Installable
.deb, portable Linux archive, XDG data directories, private first-run configuration (0600), and CLI diagnostics. - Native scanner integration: Nmap, WhatWeb, Nikto, Nuclei, ProjectDiscovery HTTPx (
httpx-toolkit), ffuf, Katana, passive Subfinder, HTTP headers, DNS, TLS, and combined endpoint mapping. - More reliable scanner execution: Isolated Linux PyInstaller subprocess environments prevent packaged-app library conflicts with installed scanners.
- Local AI and evidence-based reporting: Local-model assessments with JSON, SARIF, HTML, and PDF exports.
- Cross-platform verification: Windows installer regression checks and real Kali scanner-adapter acceptance against controlled local test fixtures.
Getting started
Windows: Use the installer for a Start menu entry and uninstaller; user settings and scan data live under %LOCALAPPDATA%\PenX. For portable use, extract the entire ZIP and run PenX\PenX.exe without separating it from _internal.
Linux/Kali: Install the Debian package on a compatible amd64 distribution, or extract the portable archive. See the Linux installation guide and Windows guide.
Verification and limitations
Eleven scanner adapters passed end-to-end tests in an isolated Kali environment. Additional owner-authorized passive WHOIS/Subfinder checks and local-model, SQLite, and report tests were performed on a Kali VM. See the Linux acceptance record.
Independent field acceptance: NOT SIGNED OFF. Windows/Npcap physical scanner tests, production upgrades and recovery, other distributions, ARM64 builds, and some manual report/visual tests remain outstanding. The Windows installer is not Authenticode-signed. Use PenX only on systems you own or are authorized to assess; scanner findings and AI output require independent validation. See #81 and #82 for historical acceptance tracking.