Skip to content

v2.0.0: The High-Performance Native Go Core Architecture

Choose a tag to compare

View all tags
@Zyrexnn Zyrexnn released this 24 Aug 01:24
· 61 commits to main since this release
v2.0.0
2f3cab4

🛡️ Cybermes v2.0.0 — The High-Performance Native Go Core Architecture

We are thrilled to announce Cybermes v2.0.0, a milestone major release featuring a ground-up architectural overhaul that transitions Cybermes' performance-critical pipeline from interpreted Python utility scripts to pure, zero-dependency, compiled Go binaries.

⚡ What's New in v2.0.0

1. 🚀 Native Go Core Toolchain (pkg/* & cmd/*)

All high-frequency terminal filters, secret extractors, knowledge lookups, and report aggregators are now built in standard-library Go with zero external runtime dependencies:

  • smart_pipe (cmd/smart_pipe): High-throughput stdout filter with zero-allocation byte frequency arrays [256]int for Shannon entropy scoring and ANSI stripping. Compresses verbose recon logs by 70%–85%, drastically reducing LLM token consumption and preventing context hallucinations.
  • secret_scan (cmd/secret_scan): Concurrent multi-threaded secret scanner evaluating 48 precompiled regexes matching modern cloud credentials (AWS, GCP, Azure), AI platform keys (OpenAI, Anthropic, HuggingFace), SaaS tokens (Stripe, Slack, GitHub PATs), and JWTs across directories and stdin.
  • search_knowledge (cmd/search_knowledge): Multi-threaded offline knowledge search engine indexing local markdown security wikis (PayloadsAllTheThings, HackTricks, Claude-BugHunter) in < 50ms.
  • aggregate_reports (cmd/aggregate_reports): High-resilience finding indexer parsing markdown frontmatter/tables, computing CVSS 3.1 severity metrics, generating SUMMARY.md / metadata.json, and preserving operator custom narrative sections.

2. 🧹 Clean Codebase & Deprecation of Python Wrappers

  • Removed legacy, high-overhead Python utility scripts: tools/smart_pipe.py, tools/search_knowledge.py, and tools/aggregate_reports.py.
  • Unified single-binary toolchain exposed directly on the system $PATH (tools/bin/*).
  • Standardized AGENTS.md, .cursorrules, and 50+ offensive skill playbooks to invoke native binary commands directly.

3. 🛠️ Multi-Platform Native Builder

  • Linux & macOS (setup.sh): Automated compilation of all 4 Go binaries into tools/bin/ upon running ./setup.sh.
  • Windows Native (setup_windows.ps1): Automated detection and compilation of native Windows .exe binaries (tools\bin\*.exe).
  • Docker (Dockerfile): Integrated container-level Go compilation ensuring 100% native CPU architecture compatibility across both AMD64 and ARM64 (Apple Silicon M-series).

4. 🧪 Quality Assurance & Testing

  • 100% test coverage across all core packages (pkg/stream, pkg/secrets, pkg/search, pkg/report) via go test ./pkg/... -v.

👥 Contributors & Upstream Credits

Special thanks to @Zyrexnn and Claude Opus for co-authoring the v2.0.0 architecture refactor, and the open-source security projects (PayloadsAllTheThings, HackTricks, ProjectDiscovery, FFuF, Strix).

🚀 Getting Started with v2.0.0

git clone https://github.com/Zyrexnn/Cybermes.git
cd Cybermes
./setup.sh
source env.sh
./hermes "Assess http://127.0.0.1:8888 and generate full report."
Assets 2
Loading