A modern reconnaissance and vulnerability assessment platform built for offensive security professionals. BreachKit empowers red team operations with a robust, scalable, and modular platform designed to streamline reconnaissance, scanning, and reporting efforts.
BreachKit is a web-based toolkit designed to simplify reconnaissance and vulnerability detection in red team engagements. The platform leverages a mix of powerful tools and services to automate scanning, organize findings, and generate actionable reports.
With an intuitive dashboard for tracking operations, BreachKit allows users to generate detailed LLM-powered reports using Ollama’s self-hosted inference engine. Whether you're a novice or an experienced red teamer, BreachKit provides a scalable and customizable platform for offensive security intelligence.
✨ Fast and Modular: Built with Docker, Litestar, and SurrealDB to ensure fast, portable deployments and smooth scaling.
✨ Distributed File Storage: SeaweedFS stores large scan reports and logs efficiently.
✨ LLM-Powered Reports: Uses Ollama’s LLM to provide detailed analysis and recommendations for detected vulnerabilities.
✨ Comprehensive Recon Tools: Integrates Nmap, Nuclei, and BBot to cover multiple aspects of reconnaissance.
✨ Secure Access: Deployed via Tor hidden services to ensure secure and anonymous usage.
The project is powered by the following technologies to ensure a seamless user experience:
- Litestar: A fast ASGI web framework for building scalable applications.
- SurrealDB: A distributed, schema-less database to manage and organize scan data.
- Ollama: A self-hosted LLM API that powers BreachKit’s automated report generation.
- SeaweedFS: A distributed file system for handling large reports and data blobs.
- Docker: Containerization platform for portability and easy deployment.
- Bulma: A modern CSS framework for responsive UI design without JavaScript.
BreachKit integrates multiple industry-standard reconnaissance tools for thorough vulnerability detection:
- BBot: A multi-modal reconnaissance tool that automates discovery and vulnerability analysis.
- Nuclei: A fast framework for vulnerability detection using customizable templates.
- Nmap: A powerful network scanning tool to map open ports and services.
BreachKit’s workflow is designed to be intuitive and effective:
- Log in to the Dashboard: Access the BreachKit dashboard through the Tor hidden service.
- Add a New Target: Use the "Add Target" feature to specify the system or organization you want to scan.
- Initiate a BBot Scan: Start a scan using BBot directly from the dashboard.
- Review Reports: View the results in the "Reports" section, including LLM-generated analysis for each finding.
- Automated Reports: The platform uses Ollama to analyze scan results and generate detailed recommendations.
- Export Options: Reports can be exported as PDFs or Markdown for sharing and further analysis.
This project is licensed under the MIT License. See the LICENSE file for more information.
Special thanks to Black Lantern Security for BBot and to the open-source community for their contributions, which made this project possible.