The Problem
Pentesters waste hours setting up environments, juggling tool versions, and writing reports. Quality engagements deserve quality scaffolding.
The Solution
A reproducible toolkit shipped as a hardened container, with consistent CLI verbs across recon, exploitation, and reporting — and an automatic evidence locker that builds the report as you work.
Key Features
Consistent verbs (recon, exploit, post, report) across 60+ underlying tools.
Every command and output is hashed, timestamped, and chained — auditable by default.
Generates a draft engagement report from the evidence locker in DOCX and PDF.
Refuses commands targeting hosts outside an explicit scope file — safety as code.
Distroless base, dropped capabilities, seccomp profile, and signed releases.
Re-runs past engagements in a sandbox for training and regression checks.
Architecture
- 1A thin Go front-end dispatches typed commands to language-specific subprocess workers.
- 2Each worker writes structured evidence to an append-only locker; SHA-256 chain detects tampering.
- 3Scope guard runs as a libpcap shim, dropping packets to out-of-scope hosts pre-flight.
- 4CI builds reproducible images and publishes signed digests for offline use.
Outcomes
Highlights
- Strictly ethical use only
- Reproducible, signed builds
- Scope-aware safety net
- Reports write themselves