Alt text

BitProbe

BitProbe is a modular security recon and vulnerability assessment framework designed for continuous web, network, and TLS analysis.

This repository contains the public version of BitProbe as it currently is. The full scanning engine and remainder of the project remains private.

Features

Public Current State

Passive technology fingerprinting (server, framework, CDN, analytics, WAF)
Network port enumeration and basic service identification
TLS configuration and certificate inspection
Security header analysis
Sensitive file and misconfiguration detection
CVE correlation using a local vulnerability database
Automated attack-chain correlation
Client-ready structured output (JSON)
Transparent risk scoring per finding
Non-intrusive scanning only

Private / Current State (Not Publicly Released)

Crawls web targets with depth control and URL limits
Runs all plugins by default at root, scoped intelligently for subpaths
Detects and flags edge/CDN infrastructure explicitly
Calculates raw risk scores before edge filtering
Calculates adjusted risk scores after edge context
Differentiates origin vs edge findings
Correlates findings into basic attack chains
Uses weighted risk scoring (impact × likelihood, normalized)

Example Usage

python3 bitprobe.py \
  --target https://example.com \
  --plugins fingerprinting,security_headers,network_scanner,tls_analysis

Security Notice

This repository does NOT contain exploit code or active offensive tooling. It is intended for defensive security testing, portfolio demonstration, and educational research only.

License

MIT License — Public interface only.

Bitprobe