wtf is bingo?

Bingo is a command-line tool that turns an AI chat session into a security testing terminal. You type questions or give instructions in plain language, and it carries out web security checks using a combination of AI-generated code and established security tools running on your machine. It supports multiple AI backends including DeepSeek, Claude, GPT, Zhipu GLM, Alibaba Qwen, and locally running models via Ollama. The tool is aimed at security professionals doing authorized red team work. Its main automated workflow is a five-phase scan: reconnaissance to identify technologies and defenses, collection of sensitive endpoints and admin panels, probing for common vulnerabilities like SQL injection and cross-site scripting, an exploitation phase with defense bypass techniques, and finally a generated report saved as a markdown file. When a URL appears in conversation, Bingo automatically detects what kind of web application firewall is protecting the site and adapts its testing payloads accordingly. Password hash cracking is another built-in capability. When hashes come up in a session, Bingo first checks several free online lookup databases, then falls back to running John the Ripper or Hashcat locally if online lookup fails. It handles bcrypt, MD5, SHA variants, NTLM, and MySQL hash formats. One of its practical features is tool management. Security testing tools like Nmap, Nuclei, and FFUF can be automatically downloaded and installed from their GitHub releases or through package managers. If a tool cannot be installed, the AI writes a Python replacement that does the same job so the workflow does not stall. Sessions are saved automatically as markdown files. The interface supports Korean, Chinese, and English. Installation is a single script command on macOS, Linux, or Windows. Python 3.10 or newer is required. The project is MIT licensed.