Wrapped the standard recon and scanning chain into docker compose, mostly to stop retyping the same commands

Mine, open source, MIT.

Not new capability. It is Amass, Naabu, Katana, FFUF, WhatWeb, WAFW00F, Nuclei and ZAP, orchestrated to run in parallel and produce one report instead of eight terminal outputs I then reconcile by hand.

The part that took actual work is the report. Every finding gets a written explanation and remediation steps, generated by a model running locally on Ollama with no API keys. The model is only allowed to write prose, scores are computed, and findings only get marked confirmed if a verification request reproduces them.

If you have a comfortable manual workflow this will not replace it. It was built for the first pass and for handing results to someone who is not you.

https://github.com/maverickaayush/ONUS. Only against things you own or have written authorization to test.
https://tryonus.tech

submitted by /u/No-Theory-790
[link] [comments]

from hacking: security in practice https://ift.tt/BkanJKs