Skip to content

Releases: yxpil/Firelin

Release list

v0.2.0

v0.2.0 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 Sep 20:17
v0.2.0
a25acdf 
MCP: serve mode now speaks Streamable HTTP JSON-RPC (0.2.0) — five to…
Assets 6
Loading

Firelin v0.1.0

Firelin v0.1.0

Choose a tag to compare

View all tags
@yxpil yxpil released this 04 Sep 10:55
v0.1.0
3ce5e7f

Firelin v0.1.0

First release of Firelin — the authorized network assessment toolkit for AI agents (especially BIT) around the BIT ecosystem.

Legal notice: use Firelin ONLY on systems you own or have written permission to test. Scan commands refuse to run without an explicit authorization confirmation (--yes-i-have-permission or FIRELIN_I_HAVE_PERMISSION=yes). Unauthorized scanning is illegal.

What's included / 包含内容

EN

  • portscan — TCP connect scanning (IP / hostname / CIDR targets, worker-thread pool, conservative defaults 200 concurrency / 800 ms timeout, CIDR size limit: > /17 rejected).
  • subdns — DNS subdomain enumeration (~200 built-in labels or custom wordlist file, hand-rolled minimal UDP DNS client, default resolver 8.8.8.8:53).
  • dirscan — directory/path enumeration (~100 built-in paths or custom wordlist, status classification exists/redirect/forbidden, 404 ignored, optional --follow-redirects).
  • fingerprint — single read-only GET: status, Server / X-Powered-By / X-AspNet-Version / X-Generator, HTML <title>, final URL.
  • cidr — IPv4 CIDR expansion with size limits.
  • serve — BIT Remote-protocol HTTP API on 127.0.0.1:8755 (GET /health, GET /invoke-actions, POST /invoke), optional Bearer token, per-action scan gating (403 for scan actions on unauthorized servers).
  • Authorization gating on all scan commands (exit 2 + prominent notice without confirmation).
  • BIT exec contract: --json everywhere, piped stdin JSON merged over CLI args (stdin wins).
  • 41 tests (unit + integration against real local sockets); CI on macOS / Linux / Windows.

中文

  • portscan —— TCP connect 扫描（支持单 IP / 主机名 / CIDR，worker 线程池，保守默认：并发 200、超时 800 ms，CIDR 大于 /17 拒绝）。
  • subdns —— 子域名枚举（内置约 200 标签或自定义词表，手写最小 UDP DNS 客户端，默认解析器 8.8.8.8:53）。
  • dirscan —— 目录/路径枚举（内置约 100 路径或自定义词表，状态分类 exists/redirect/forbidden，404 忽略，可选 --follow-redirects）。
  • fingerprint —— 单次只读 GET：状态、Server / X-Powered-By / X-AspNet-Version / X-Generator、HTML <title>、最终 URL。
  • cidr —— IPv4 CIDR 展开（带规模上限）。
  • serve —— 兼容 BIT Remote 协议的 HTTP API（127.0.0.1:8755：GET /health、GET /invoke-actions、POST /invoke），可选 Bearer token，按动作扫描门控（未授权启动的 serve 对扫描动作返回 403）。
  • 所有扫描命令内置授权门控（未确认授权即退出码 2 并打印醒目声明）。
  • BIT exec 契约：全命令支持 --json，stdin 管道 JSON 合并覆盖 CLI 参数（stdin 优先）。
  • 41 个测试（单元 + 对真实本地 socket 的集成测试）；CI 覆盖 macOS / Linux / Windows。

Install / 安装

Platform Asset
macOS Apple Silicon firelin-v0.1.0-aarch64-apple-darwin.tar.gz
macOS Intel firelin-v0.1.0-x86_64-apple-darwin.tar.gz
Linux x64 firelin-v0.1.0-x86_64-unknown-linux-gnu.tar.gz
Windows x64 firelin-v0.1.0-x86_64-pc-windows-msvc.zip 
tar xzf firelin-v0.1.0-aarch64-apple-darwin.tar.gz
sudo mv firelin-v0.1.0-aarch64-apple-darwin/firelin /usr/local/bin/
firelin portscan 127.0.0.1 --ports 80-90 --yes-i-have-permission --json

Or / 或: cargo install --git https://github.com/yxpil/Firelin

Checksums are produced by the release CI workflow / 校验和由 release CI 工作流生成。

Notes / 说明

  • Scan actions via serve require the server itself to be started with --yes-i-have-permission (or the env var); otherwise /invoke answers 403 for portscan / subdns / dirscan.
  • serve 的扫描动作要求服务本身带 --yes-i-have-permission（或环境变量）启动，否则 /invoke 对 portscan / subdns / dirscan 返回 403。
  • Part of the BIT ecosystem. / BIT 生态组件。
Loading