Features
An AI pentest agent, exploitation and recon — on Android
Lupus bundles the Metasploit Framework, Nmap, Nuclei and a full recon, web and Active Directory arsenal — with a workspace database, session manager and an autonomous AI agent — built for a phone, so you do in a tap what would take a long command on a tiny keyboard. A genuinely useful free tier; Pro unlocks the complete testing workflow. See every tool on the Tools page. For authorized security testing only.
Autonomous AI
Lupus AI Agent
An autonomous agent that runs recon, scanning, exploitation, post-exploitation and reporting on its own, orchestrating every tool below and writing findings into the workspace database. Connect your own Claude access; works in local and remote mode. For authorized engagements only.
Browse the full arsenal →Free
Exploitation
- Metasploit exploits & auxiliary
- Meterpreter & shell sessions
- msfconsole (raw)
- Exploit-DB / searchsploit
Free
Recon & scanning
- Nmap with scan profiles
- naabu fast port scan
- httpx · katana · ffuf · gobuster
- subfinder · dnsx · dnsrecon
Free
AD, SMB & credentials
- Impacket suite
- NetExec (nxc)
- smbclient
- Responder (root)
Free
Workspace database
- Hosts & services
- Vulnerabilities
- Credentials
- Loots & findings
Free
On-site operation
- Mobile data for Lupus' own traffic
- Engine on-device or on a remote agent
- Execute as root
- On-device tool updates
Pro
Advanced session tools — Pro
- File explorer
- Process manager
- Network / pivoting
- Core commands
- Monitoring
Pro
Power tooling — Pro
- Nuclei vulnerability scanning
- msfvenom payload generation
- Custom modules & payload files
- Session handlers
- Post-exploitation modules
- Advanced Nmap
Pro
Workflow — Pro
- DB export / import / write
- Multiple workspaces
- Unlimited background tasks