Anubis Anubis v2.6.0 — Linux Standalone Engine, Deep Crawler & Categorized CLI

We are excited to announce Anubis v2.6.0, a major release focused on streamlining the audit experience for Linux distributions, introducing an automated deep crawler injection pipeline, and standardizing the command-line interface.

Anubis is distributed as a zero-dependency, standalone static binary for Linux (x86_64 and arm64), requiring no external runtimes or installation steps.

---

⚡ Highlights & Key Changes

🎯 Categorized & Standardized CLI (--help)

• Re-architected command-line flags into intuitive functional groups:

  • Target Specification: -t, -b, --batch, --resume

  • Audit Modes & Depth: -l, -m, --quick-vuln, --deep-scan, --module-priority

  • Crawler & Discovery: --crawl, --crawl-depth, --crawl-max-pages, --respect-limits

  • Templates: --templates, --tags, --severity

  • Evasion & Stealth: --ghost, --user-agent, --random-agent, --delay, --jitter, --strategy

  • Network & Proxies: --proxy, --proxy-file, --tor, --timeout, --retries, --insecure

  • Reporting & Output: -o, -f (html, json, csv), -s (--silent), -v

🕷️ Deep Crawler Pipeline Integration

• Discovered endpoints, links, and HTML forms from --crawl are now directly fed into active vulnerability engines (SQLi, XSS, LFI, SSTI).

• Configurable recursion depth (--crawl-depth) and page caps (--crawl-max-pages) with robots.txt adherence.

🤫 Native Unix Pipe Integration (-s, --silent)

• Completely eliminates banners, interactive progress, and ASCII art when running in silent mode, enabling seamless piping with standard Unix tools:

  anubis -t https://example.com -l 2 -f json -s | jq '.findings[] | select(.severity=="HIGH")'
  

📦 Instant Linux Standalone Distribution (Zero Setup)

• Native pre-compiled binaries for Linux amd64 and Linux arm64.

• Automated installer that fetches pre-built binaries directly into /usr/local/bin/anubis:

curl -sSL https://raw.githubusercontent.com/SepJs/anubis/main/install.sh | bash

---

📥 Quick Download (Direct Binaries)

Architecture | Platform | Download Link -- | -- | -- x86_64 / amd64 | Linux (Ubuntu, Debian, Kali, Arch, Fedora) | anubis_2.6.0_linux_amd64 aarch64 / arm64 | Linux (ARM64, Cloud instances, Raspberry Pi) | anubis_2.6.0_linux_arm64

One-Line Terminal Execution:

# Download and make executable
curl -sSL https://github.com/SepJs/anubis/releases/download/v2.6.0/anubis_2.6.0_linux_amd64 -o anubis
chmod +x anubis
sudo mv anubis /usr/local/bin/
Run scan
anubis -t https://example.com -l 1

---

🔒 Integrity Checksums (SHA-256)

Refer to the attached checksums.txt file in the release assets for cryptographic verification.

Disclaimer: Anubis is intended exclusively for authorized penetration testing, vulnerability assessments, and educational research.

# 🛡️ Anubis v2.6.0 — Enterprise-Grade Linux Security Scanner

We are excited to announce Anubis v2.6.0, a major release focused on streamlining the audit experience for Linux distributions, introducing an automated deep crawler injection pipeline, and standardizing the command-line interface.

Anubis is distributed as a zero-dependency, standalone static binary for Linux (x86_64 and arm64), requiring no external runtimes or installation steps.

---

⚡ Highlights & Key Changes

🎯 Categorized & Standardized CLI (--help)

• Re-architected command-line flags into intuitive functional groups:

  • Target Specification: -t, -b, --batch, --resume
  • Audit Modes & Depth: -l, -m, --quick-vuln, --deep-scan, --module-priority
  • Crawler & Discovery: --crawl, --crawl-depth, --crawl-max-pages, --respect-limits
  • Templates: --templates, --tags, --severity
  • Evasion & Stealth: --ghost, --user-agent, --random-agent, --delay, --jitter, --strategy
  • Network & Proxies: --proxy, --proxy-file, --tor, --timeout, --retries, --insecure
  • Reporting & Output: -o, -f (html, json, csv), -s (--silent), -v

🕷️ Deep Crawler Pipeline Integration

• Discovered endpoints, links, and HTML forms from --crawl are now directly fed into active vulnerability engines (SQLi, XSS, LFI, SSTI).
• Configurable recursion depth (--crawl-depth) and page caps (--crawl-max-pages) with robots.txt adherence.

🤫 Native Unix Pipe Integration (-s, --silent)

• Completely eliminates banners, interactive progress, and ASCII art when running in silent mode, enabling seamless piping with standard Unix tools:

  anubis -t https://example.com -l 2 -f json -s | jq '.findings[] | select(.severity=="HIGH")'

📦 Instant Linux Standalone Distribution (Zero Setup)

• Native pre-compiled binaries for Linux amd64 and Linux arm64.

• Automated installer that fetches pre-built binaries directly into /usr/local/bin/anubis:

curl -sSL https://raw.githubusercontent.com/SepJs/anubis/main/install.sh | bash

---

📥 Quick Download (Direct Binaries)

Architecture	Platform	Download Link
x86_64 / amd64	Linux (Ubuntu, Debian, Kali, Arch, Fedora)	[anubis_2.6.0_linux_amd64](https://www.google.com/url?sa=E&q=https%3A%2F%2Fgithub.com%2FSepJs%2Fanubis%2Freleases%2Fdownload%2Fv2.6.0%2Fanubis_2.6.0_linux_amd64)
aarch64 / arm64	Linux (ARM64, Cloud instances, Raspberry Pi)	[anubis_2.6.0_linux_arm64](https://www.google.com/url?sa=E&q=https%3A%2F%2Fgithub.com%2FSepJs%2Fanubis%2Freleases%2Fdownload%2Fv2.6.0%2Fanubis_2.6.0_linux_arm64)

One-Line Terminal Execution:

# Download and make executable
curl -sSL https://github.com/SepJs/anubis/releases/download/v2.6.0/anubis_2.6.0_linux_amd64 -o anubis
chmod +x anubis
sudo mv anubis /usr/local/bin/

# Run scan
anubis -t https://example.com -l 1

---

🔒 Integrity Checksums (SHA-256)

Refer to the attached checksums.txt file in the release assets for cryptographic verification.

Disclaimer: Anubis is intended exclusively for authorized penetration testing, vulnerability assessments, and educational research.

Anubis v2.5.2 — Crawler, Custom Templates, Smarter Detection & New Modules

Anubis v2.5.2

The biggest update since v2.0 — new scan modules, a built-in web crawler, a Nuclei-style YAML template engine, dramatically improved SQLi/XSS detection, and a much faster subdomain discovery pipeline.

✨ New Features

🔍 Crawler (--crawl)

New dependency-free crawler discovers endpoints before injection testing:

• Same-host link extraction with query strings

• GET form parsing — input names become testable parameters

• Depth and page limits: --crawl-depth, --crawl-max-pages

• Inherits rate limiting, SSL bypass, and proxy settings from your scan

anubis -t https://example.com -l 2 --crawl --crawl-depth 2 --crawl-max-pages 50

🧩 Custom YAML Templates (--templates)

Define your own checks without touching Go code — Nuclei-style matchers:

id: admin-panel-detect
name: "Admin Panel Detection"
severity: low
level: 1
endpoint: /admin
matchers:
  - type: status
    value: "200"
  - type: contains
    value: "admin"

anubis --templates ./templates/custom -t https://example.com -l 2

Supported matcher types: contains, regex, status, header, words — combine with condition: and|or, inline or file-based payloads, custom placeholder, CVSS/OWASP mapping and remediation text.

🆕 Three New Scan Modules

Module | Level | What it detects -- | -- | -- LFI | L2 | Path traversal with classic, filter-evasion and double-encoding payloads (..%252f, ....//) — content-signature confirmed SSTI | L2 | Server-side template injection using the marker technique ({{7*7}} → evaluated 49 between unique markers) — raw echoes never raise findings OPENREDIRECT | L2 | Canary-host redirect detection via Location header, meta-refresh and JS redirects — no external network calls, uses reserved .invalid TLD

🧠 Rewritten Detection Engine

• SQL Injection: three techniques in one pass

  • Error-based with baseline comparison — DB error signatures only fire when absent from the baseline response (dramatically fewer false positives)

  • Boolean-based blind — AND 1=1 vs AND 1=2 differential vs baseline

  • Time-based blind — MySQL/PostgreSQL/MSSQL sleep payloads with two-request verification (auto-disabled in --ghost)

• Reflected XSS — reflection is confirmed only when the raw marker appears unescaped; URL-encoded echoes are correctly rejected

📁 External Wordlists

--wordlist now feeds sensitive-file discovery too, not just brute-force:

anubis -t https://example.com -l 1 --wordlist ~/seclists/Discovery/Web-Content/common.txt

Unknown paths get severity LOW so your triage queue stays clean.

🌐 Certificate Transparency Subdomain Discovery

With --external-api, DNS enumeration now queries crt.sh Certificate Transparency logs and merges results with brute-force subdomain discovery:

anubis -t example.com -l 2 --external-api

🐞 Reliability Fixes

• Crash logs now written to the user cache dir (~/.cache/anubis/crash.log) instead of the source tree — no more repo pollution, no more failures on read-only paths

• Build artifacts and crash logs removed from the repository; proper .gitignore added

📦 Packaging

• Homebrew: brew tap SepJs/anubis && brew install anubis

• PowerShell (Windows): iex ((New-Object System.Net.WebClient).DownloadString('https://raw.githubusercontent.com/SepJs/anubis/main/install.ps1'))

• Docker, static binaries for Linux / Windows / macOS — still zero CGO

📚 Documentation

Full docs: github.com/SepJs/anubis — YAML template format, examples in templates/custom/, and the complete flag reference.

# Anubis v2.5.2

The biggest update since v2.0 — new scan modules, a built-in web crawler, a Nuclei-style YAML template engine, dramatically improved SQLi/XSS detection, and a much faster subdomain discovery pipeline.

✨ New Features

🔍 Crawler (--crawl)

New dependency-free crawler discovers endpoints before injection testing:

• Same-host link extraction with query strings
• GET form parsing — input names become testable parameters
• Depth and page limits: --crawl-depth, --crawl-max-pages
• Inherits rate limiting, SSL bypass, and proxy settings from your scan

anubis -t https://example.com -l 2 --crawl --crawl-depth 2 --crawl-max-pages 50

🧩 Custom YAML Templates (--templates)

Define your own checks without touching Go code — Nuclei-style matchers:

id: admin-panel-detect
name: "Admin Panel Detection"
severity: low
level: 1
endpoint: /admin
matchers:
  - type: status
    value: "200"
  - type: contains
    value: "admin"

anubis --templates ./templates/custom -t https://example.com -l 2

Supported matcher types: contains, regex, status, header, words — combine with condition: and|or, inline or file-based payloads, custom placeholder, CVSS/OWASP mapping and remediation text.

🆕 Three New Scan Modules

Module	Level	What it detects
LFI	L2	Path traversal with classic, filter-evasion and double-encoding payloads (..%252f, ....//) — content-signature confirmed
SSTI	L2	Server-side template injection using the marker technique ({{7*7}} → evaluated 49 between unique markers) — raw echoes never raise findings
OPENREDIRECT	L2	Canary-host redirect detection via Location header, meta-refresh and JS redirects — no external network calls, uses reserved .invalid TLD

🧠 Rewritten Detection Engine

• SQL Injection: three techniques in one pass

  • Error-based with baseline comparison — DB error signatures only fire when absent from the baseline response (dramatically fewer false positives)
  • Boolean-based blind — AND 1=1 vs AND 1=2 differential vs baseline
  • Time-based blind — MySQL/PostgreSQL/MSSQL sleep payloads with two-request verification (auto-disabled in --ghost)

• Reflected XSS — reflection is confirmed only when the raw marker appears unescaped; URL-encoded echoes are correctly rejected

📁 External Wordlists

--wordlist now feeds sensitive-file discovery too, not just brute-force:

anubis -t https://example.com -l 1 --wordlist ~/seclists/Discovery/Web-Content/common.txt

Unknown paths get severity LOW so your triage queue stays clean.

🌐 Certificate Transparency Subdomain Discovery

With --external-api, DNS enumeration now queries crt.sh Certificate Transparency logs and merges results with brute-force subdomain discovery:

anubis -t example.com -l 2 --external-api

🐞 Reliability Fixes

• Crash logs now written to the user cache dir (~/.cache/anubis/crash.log) instead of the source tree — no more repo pollution, no more failures on read-only paths
• Build artifacts and crash logs removed from the repository; proper .gitignore added

📦 Packaging

• Homebrew: brew tap SepJs/anubis && brew install anubis
• PowerShell (Windows): iex ((New-Object System.Net.WebClient).DownloadString('https://raw.githubusercontent.com/SepJs/anubis/main/install.ps1'))
• Docker, static binaries for Linux / Windows / macOS — still zero CGO

📚 Documentation

Full docs: [github.com/SepJs/anubis](https://github.com/SepJs/anubis) — YAML template format, examples in templates/custom/, and the complete flag reference.

Anubis v2.0.0 — The Sovereign Security Engine

We are proud to announce the official release of Anubis v2.0.0. This milestone represents a complete architectural overhaul, transforming Anubis from a security scanner into an autonomous, hardened, and stealth-oriented security auditing platform.

Key Highlights:

• Zero-CGO Architecture: We have achieved total independence from system libraries. By replacing all C-dependent modules with pure Go alternatives (including modernc.org/sqlite), Anubis is now safer, more portable, and easier to compile across all platforms.
• Stealth-First Evasion: Anubis is now effectively invisible to standard WAFs and IPS. With polymorphic jitter, randomized packet padding, and dynamic browser fingerprinting, it blends seamlessly into legitimate traffic.
• Adaptive Intelligence: The new Heuristic Engine uses AI-driven latency analysis to dynamically adjust scan intensity, ensuring you maintain maximum speed without triggering rate-limiting.
• Resilience & Reliability: With a panic-recovery system, atomic state management, and a circuit-breaker pattern, Anubis is built to run long-term, high-concurrency scans without crashes.

Technical Improvements:

• Core: Transitioned to a high-performance worker-pool pattern with dynamic context cancellation.
• Payloads: Advanced multi-layer encoding engine (Double-URL, Base64 nested, Unicode) to bypass deep packet inspection.
• Networking: Full raw socket support and intelligent proxy rotation (SOCKS5/HTTP/HTTPS) with auto-failover.
• API: Full gRPC support for remote control and integration into existing CI/CD pipelines.
• Database: High-speed, AES-256-GCM encrypted local storage for scan history and trend analysis.
• Build: Optimized binary sizes using -s -w stripping and upx support, with automated SHA256 checksum verification.

Optimizations:

• Dependency Audit: Aggressively pruned dependencies. Removed fatih/color and progressbar in favor of standard library implementations to minimize the attack surface.
• Hardening: Enabled CGO_ENABLED=0 globally to eliminate dynamic linking risks and ensure static binary stability.

Get Started:

For installation instructions, cross-platform support details, and the full architectural blueprint, please visit our [GitHub Repository](https://github.com/SepJs/anubis).

---

Vladimir Unknown — Engineering Excellence in Security.

Anubis v1.1.2 - Peak Performance & Stability

Summary:
Version 1.1.2 marks a critical milestone in Anubis's development. We have shifted our focus from core architecture to fine-tuning performance and ensuring absolute reliability. This release represents the most stable and optimized iteration of the engine to date.

Changelog:

• Engine Optimization: Significant improvements to memory management and resource allocation during high-load scanning.
• Concurrency Hardening: Final refinements to the internal threading model, eliminating all remaining edge-case synchronization issues.
• Auto-Update Reliability: Enhanced the self-updating mechanism for smoother transitions to future versions. Simply run --update to stay current.
• Scan Precision: Improved logic in core modules, resulting in more accurate findings and cleaner, more actionable output.
• Stability Fixes: Addressed all minor bugs reported since the last major refactor, ensuring a "plug-and-play" experience for security professionals.

Ready for Production:
Anubis is now fully optimized for intensive security auditing and production environments.

Anubis v1.1.1 - Maintenance & Stability Patch

Engine Hardening: Final cleanup of the concurrency logic, ensuring 100% stability under heavy scan loads.

Bug Squashing: Fixed all remaining edge-case errors discovered in v1.1.0.

Dependency Audit: Cleaned up go.mod and resolved all lingering synchronization issues between modules.

Ready for Production: With this patch, Anubis is officially stable and ready for daily security auditing tasks.

Anubis v1.1.0 - The Rebuild: A New Era for Anubis

Release Notes

This release marks a significant milestone for Anubis. We have completely re-engineered the core engine to ensure maximum stability, performance, and scalability. This is not just an update—it is a total rebuild.

Core Enhancements

• Engine Core Rewrite: Completely refactored the scan engine to eliminate concurrency deadlocks and race conditions, ensuring reliable execution flow.
• Intelligent Rate Limiting: Implemented a new delay package. Rate limiting is now active and configurable across core modules: portscan, sensitive, sqli, xss, and brute_force.
• Auto-Update System: Added --update and --check-update flags. Anubis now connects to the GitHub API to check for new versions and can perform self-updates by replacing the binary with a backup.

Technical Improvements

• Modular Reliability: All scan modules have been re-wired to properly implement the scanner.Module interface, resolving previous build-time interface compliance errors.
• Refined Concurrency: Removed redundant WaitGroup logic and fixed stdout conflicts to ensure stable scan progress reporting.
• DNS Module: Updated the DNS lookup logic with better handling and proper status reporting.
• Stability Fixes: Resolved syntax errors and interface declaration conflicts across the codebase, ensuring a smooth compilation process.

---

How to Install/Upgrade

To build the project from source:

git pull origin main
go mod tidy
go build -o anubis ./cmd/anubis

For any issues during the build, please open an issue in the repository with the error logs.

Anubis v1.0.2 — Automatic Updates & Architecture Refactor

Anubis v1.0.2 — Automatic Updates & Architecture Refactor

This release introduces a critical core capability to Anubis: Silent Automatic Updates, ensuring all deployed scanner nodes stay synchronized with the latest security signatures and engine modifications without manual user intervention. Additionally, the CLI flag systems have been strictly re-typed to solve upstream parsing conflicts.

🚀 New Features & Capabilities

• Background Auto-Updater (update.go): Integrated a decentralized network update cycle. Every time Anubis initializes, it securely polls upstream sources (version.txt and stable production binaries) to atomically patch and replace the active system binary under /usr/local/bin/anubis if a newer version is present.
• Modular Main Entry (main.go): Decoupled the upgrade verification hook from Cobra's lifecycle, routing it straight through the primary initialization layer to eliminate boot-up race conditions.

🛠️ Bug Fixes & Architecture Refinement

• Strict Type Mapping: Resolved several type mismatch constraints in cmd/anubis/root.go where runtime flags (report-level, framework-examples, show-remediation, module-priority, and external-api) were crashing due to dynamic type assumptions against values in flags.go.
• Cobra Help Route Interception: Eliminated a duplicate declaration error for dispatchScan by properly aligning the command structure with cmd/anubis/scan.go.
• SQLMap-Style Custom Help Menu: Fully optimized the granular -h / --help dashboard output for clean terminal representations.

📋 Verification & Installation

To pull this architecture fix manually before the auto-updater handles subsequent pushes, execute:

# Clean your previous build caching
hash -r

# Run the localized installer
sudo ./install.sh

v1.0.1 - Engine Refactor & Stability Patch

Modularization: Refactored the core engine logic to decouple CLI commands from scan execution, fixing redeclaration conflicts.

Interface Compliance: Standardized all scanner modules by correctly implementing Description() and Level() methods.

Bug Fixes: Resolved build-time errors caused by duplicate method declarations in module packages.

Code Cleanup: Removed unused imports and optimized the scan dispatcher logic for better maintainability.

Stability: Improved build reliability across all scan modules.

Anubis v1.0.0 - Initial Stable Release

Anubis Architecture v1.0.0

The initial stable release of the Anubis enterprise security framework.

Core Features Implemented:

• Level 0-3 Inspection Pipeline.
• Concurrent Goroutine Worker Pool Logic.
• Resumable Telemetry Checkpoints (--resume).
• Multi-format Automated Reporting (HTML/JSON/CSV).