Nightcrawler: A Local AI Pentesting Agent on a Smartphone

“My phone just red-teamed the network. No internet, no cloud, no trace.”

The Story

Nightcrawler is an open-source autonomous red-team agent designed to run locally on a smartphone such as a OnePlus 8 with Kali NetHunter. It uses a small on-device 1.2B model, maps services, runs exploits through 27 playbooks, enforces scope, self-heals, and generates reports without a cloud dependency. Its authors report 72+ hours of continuous testing.

Why It Matters

Offensive cyber capability is being compressed into air-gapped pocket agents, shifting who can wield autonomous security tools and where oversight lives.

Evidence

garagehq/nightcrawler on GitHub / Show HN.

Sources

Daily scan: 2026-08-03