Launching today
Crossfyre Toolchain
Your whole recon stack in one open-source install
2 followers
Your whole recon stack in one open-source install
2 followers
Five command-line engines for web security testing: subdomains, ports, content discovery, fingerprinting and nuclei-compatible templates. One install on Linux, macOS or Windows, a shared terminal dashboard, and JSON that pipes into anything. Apache 2.0.
Free
Launch Team / Built With
AWS Startup AdvisorPersonalized AWS guidance that meets you where you’re already building
Promoted
Hi PH, I'm Dikshant.
Some of you saw mach here last year, a web fuzzer I built on its own. It lives in this toolchain now as ambulo, next to four other engines: voyage for subdomains, doorward for ports, toolmark for fingerprinting and plessor for vulnerability templates. One install puts all five on Linux, macOS or Windows, and each one draws a terminal dashboard or pipes JSON into whatever you use.
Most of the work went into plessor not lying. Every false positive it gave me in testing was the scanner reading back something it had caused: a page echoing the User-Agent it sent, an SSRF "confirmed" because our own client followed a redirect. A test now fails the build if a template can match on a word it sends.
It's Apache 2.0 and free. If you run it against your own lab and it reports something that isn't real, I'd like to hear about it.