AISA-Scanner — Autonomous AI Security Agent

AISA-Scanner is a self-evolving, AI/ML-driven cybersecurity analysis toolkit that blends NLP, CVE enrichment, autonomous scanning, risk modeling, and enterprise-grade reporting into a single framework. It’s designed for modern security researchers, penetration testers, red teams, and enterprise defenders who need real-time vulnerability insight, enriched intelligence, and actionable outcomes.

DOWNLOAD FULL PDF HERE

https://cyberzeus.pk/AISA_Scanner_The_Autonomous_AI_Security_Agent_Technical_Guide.pdf

Key Features

Category	Description
Target Types	Domains, Subdomains, IPs, TCP Ports
AI Engine	Zero-Shot OWASP classification
Risk Model	Online self-learning classifier with scoring
CVEs	CVE detection from banners, NLP (NER), and AI hints
CVE Enrichment	CVSS, CWE, and Descriptions from NVD
Exploit Mapping	Metasploit modules auto-mapped from CVE
Enterprise Reports	HTML reports with datatables, CVE links, MITRE heatmaps, export buttons
Taxonomy Mapping	Automatic mapping to MITRE ATT&CK, CEH Modules, and SANS CWE Top 25
Subdomain Scanner	Fuzzy resolver with wildcard detection
HTTP + TCP Support	Fetch + probe banners on open TCP ports
Persistent Findings	SQLite logging with JSON blob per record
NLP-Powered Risk	Uses AI confidence + vulnerability count + MSF links to assign severity
Offline/Resumable	Caches mappings, CVE details, MSF modules for offline use
Self-Healing Model	Trains on new results to refine the accuracy
Customizable	Time budget, confidence gating, subdomain limit, custom port range

Comparison: AISA-Scanner vs Other Tools

Feature	AISA-Scanner	Nessus	Nikto	OpenVAS
AI Labeling (OWASP)	✅	❌	❌	❌
Zero-Shot Classification (NLP)	✅	❌	❌	❌
CVE Auto-Mapping to MSF Modules	✅	❌	❌	✅
MITRE ATT&CK + CEH + SANS Mapping	✅	Partial	❌	Partial
Subdomain Enumeration	✅	❌	❌	❌
TCP Port Banner Scanning	✅	✅	✅	✅
PDF/CSV/Excel Report Export	✅	✅	❌	✅
Self-Learning Risk Model	✅	❌	❌	❌
Lightweight & CLI-Ready	✅	❌	✅	❌
Free and Open Source	✅	❌	✅	✅

Why AISA-Scanner Wins: It blends intelligent classification, autonomous enrichment, deep CVE-MSF relationships, and a lightweight, no-dependency interface for real-time scanning and reporting—all in one script. Author: Haroon Ahmad Awan haroon@cyberzeus.pk

Usage – Report Picture

Below is a sample enterprise-style HTML report generated by AISA-Scanner:

Includes CVE links, MITRE techniques, risk chart, export options (PDF, Excel), and search-enabled table.

🔧 Installation

git clone https://github.com/haroonawanofficial/AISA-Scanner.git
cd AISA-Scanner
pip install -r requirements.txt