Skip to content

Releases

ARGOS v1.1.0 — CLI, Resume, Proxy/Auth, AI Exploit Analysis

ARGOS v1.1.0 — CLI, Resume, Proxy/Auth, AI Exploit Analysis Latest
Latest

Choose a tag to compare

View all tags
@Hemiize Hemiize released this 04 Nov 06:11
v1.1.0
c9b70b5

What's New

Bug Fixes

  • datetime.utcnow() replaced with datetime.now() (Python 3.12+ deprecation)
  • urllib.parse imports moved to top-level — removed inline duplicates
  • Duplicate ci entry removed from subdomain SUBS list
  • run_banner_grab rebuilt with port-appropriate probes (Redis PING, HTTP HEAD, Kubernetes /healthz, etc.)

New Features

CLI Arguments

argos --target example.com --depth 2 --proxy http://127.0.0.1:8080 --cookie "session=abc" --auth admin:pass

Target Validation

Reachability check before scan starts — DNS resolve + TCP port probe with clear error message.

Scan Resume

Interrupted scans are saved per-tool to SQLite (tool_results table). On restart, ARGOS detects the partial session and offers to resume where it left off.

Proxy & Authentication Support

Route all requests through Burp/ZAP (--proxy), inject a session cookie (--cookie), or use HTTP Basic Auth (--auth). Settings persist in settings.json and are configurable via the Settings menu.

Custom Wordlists

Provide external wordlist files for directory enumeration and subdomain enumeration via Settings or --proxy / --subdomain-wordlist.

Progress Counter (X/N)

Scan progress bar now shows [3/13] style counter alongside the tool name.

Session Count on Banner

Startup banner displays the number of saved sessions.

Configurable Default Scan Depth

DEFAULT_SCAN_DEPTH in config.py sets the pre-selected depth for new scans.

AI-Powered Exploit Result Analysis

After running an exploit, the local LLM interprets the raw tool output and displays a clean result panel:

╭─── SQL Injection Test ───────────────────────────────────────────╮
│ ✔  ERFOLG                                                        │
│                                                                   │
│ Ergebnis  : Parameter ?id is vulnerable to UNION-based SQLi      │
│ Beweis    : "you have an error in your SQL syntax"               │
│ Severity  : CRITICAL                                             │
│ Next step : sqlmap -u "…" --dbs --batch                          │
╰───────────────────────────────────────────────────────────────────╯

No more scrolling through raw nmap/curl/nikto output — just success/fail + key evidence.

Assets 2
Loading

ARGOS v1.0.0 — Initial Release

ARGOS v1.0.0 — Initial Release

Choose a tag to compare

View all tags
@Hemiize Hemiize released this 04 Nov 05:33
v1.0.0
1120d88

ARGOS v1.0.0 — Initial Release

AI-powered terminal tool for web reconnaissance, vulnerability analysis, and exploit suggestion.

What's included

  • 27-tool recon engine — Standard (5) → Deep (13) → Ultra (27) scan modes running in parallel
  • Deface detection — Checks defacement signatures, shell paths, exposed .git, WebDAV write access
  • SQLi / XSS / CORS / clickjacking / open redirect / path traversal probes (Ultra mode)
  • Local LLM analysis via llama.cpp or Ollama — no cloud, no data leaks
  • Live token/s display with real-time streaming counter
  • Payload execution mode — allowlisted runner for nmap, sqlmap, nikto, curl, dirb, gobuster, wfuzz, hydra, ffuf, nuclei
  • CVE enrichment via NVD API v2 with 7-day local SQLite cache
  • PDF / HTML / JSON / Markdown export
  • Session history — SQLite database, session diff, re-run exploits
  • Cross-platform — Windows (PowerShell) + Linux

Installation

git clone https://github.com/Hemiize/argos.git
cd argos
# Windows:
setup.bat
# Linux:
python3 -m venv venv && source venv/bin/activate && pip install -r requirements.txt

Requires: Python 3.10+, nmap (in PATH), and either llama.cpp server or Ollama.

This software is intended for use only on systems you own or have explicit written permission to test.
The author assumes no liability for any misuse, damage, or legal consequences.

License: MIT with Attribution — credit required: "Based on ARGOS by Hemiize"

Loading