🔗 Tool Chains Configuration Guide

Complete guide to Zypheron's tool chain system.

📋 Overview

Tool chains allow you to define sequences of security tools with priorities and parameters for automated testing workflows.

📂 Configuration File

Tool chains are defined in ~/.zypheron/toolchains.yaml or zypheron-go/config/toolchains.yaml.

File Structure

chain_name:
  - tool: tool_name
    priority: 1
    params:
      key: value

🛠️ Available Tool Chains

1. Network Discovery

Comprehensive network reconnaissance.

network_discovery:
  - tool: arp-scan
    priority: 1
    params:
      local_network: true
  - tool: rustscan
    priority: 2
    params:
      ulimit: 5000
      scripts: true
  - tool: nmap
    priority: 3
    params:
      scan_type: "-sS"
      os_detection: true
      version_detection: true
  - tool: masscan
    priority: 4
    params:
      rate: 1000
      ports: "1-65535"
      banners: true

Usage:

zypheron scan example.com --chain network_discovery

2. Vulnerability Assessment

Automated vulnerability scanning.

vulnerability_assessment:
  - tool: nuclei
    priority: 1
    params:
      severity: "critical,high,medium"
      update: true
  - tool: jaeles
    priority: 2
    params:
      threads: 20
      timeout: 20
  - tool: dalfox
    priority: 3
    params:
      mining_dom: true
      mining_dict: true
  - tool: nikto
    priority: 4
    params:
      comprehensive: true
  - tool: sqlmap
    priority: 5
    params:
      crawl: 2
      batch: true

Usage:

zypheron scan https://example.com --chain vulnerability_assessment

3. Reverse Engineering

Binary analysis workflow.

reverse_engineering:
  - tool: file
    priority: 1
    params:
      detailed: true
  - tool: strings
    priority: 2
    params:
      min_length: 4
  - tool: objdump
    priority: 3
    params:
      disassemble: true
      headers: true
  - tool: readelf
    priority: 4
    params:
      headers: true
      sections: true
  - tool: radare2
    priority: 5
    params:
      analysis: true
      auto: true
  - tool: ghidra
    priority: 6
    params:
      headless: true
      analysis: true

Usage:

zypheron reverse-eng /path/to/binary --chain reverse_engineering

4. Binary Exploitation (PWN)

CTF and exploitation workflow.

pwn:
  - tool: checksec
    priority: 1
    params:
      file: true
  - tool: strings
    priority: 2
    params:
      min_length: 4
  - tool: gdb
    priority: 3
    params:
      batch: true
      ex: "commands"
  - tool: pwntools
    priority: 4
    params:
      context: true
      gdb: true
  - tool: ropper
    priority: 5
    params:
      all: true
  - tool: one_gadget
    priority: 6
    params:
      raw: true

Usage:

zypheron pwn /path/to/binary --chain pwn

5. Digital Forensics

Forensics analysis workflow.

forensics:
  - tool: file
    priority: 1
    params:
      detailed: true
  - tool: strings
    priority: 2
    params:
      min_length: 4
      all: true
  - tool: binwalk
    priority: 3
    params:
      extract: true
      entropy: true
  - tool: foremost
    priority: 4
    params:
      recover: true
  - tool: volatility
    priority: 5
    params:
      profile: "auto"
      plugins: true
  - tool: sleuthkit
    priority: 6
    params:
      analysis: true

Usage:

zypheron forensics disk.img --chain forensics

6. API Security Testing

API penetration testing with dedicated API tools.

api_pentest:
  - tool: nmap
    priority: 1
    params:
      ports: "443,8443"
      ssl: true
  - tool: httpx
    priority: 2
    params:
      tech_detect: true
  - tool: kiterunner
    priority: 3
    params:
      wordlist: "routes-large.kite"
  - tool: nikto
    priority: 4
    params:
      ssl: true
  - tool: nuclei
    priority: 5
    params:
      severity: "critical,high"
      tags: "api"
  - tool: jwt-tool
    priority: 6
    params:
      scan: true
  - tool: schemathesis
    priority: 7
    params:
      checks: "all"

Usage:

zypheron api-pentest https://api.example.com --chain api_pentest

api-pentest uses safe BFLA probes by default and only sends guessed state-changing API methods when --destructive is set. In non-interactive runs, combine --destructive with --yes. Python API and web scanner components enforce same-host or configured scope and block private-network targets unless they are explicitly enabled and in scope.

7. AI-Powered Dorking

Search engine reconnaissance.

dorking:
  - tool: browser-agent
    priority: 1
    params:
      engine: "google"
      ai_guided: true

Usage:

zypheron dork "site:example.com" --chain dorking

🎯 Creating Custom Tool Chains

Basic Example

my_custom_scan:
  - tool: nmap
    priority: 1
    params:
      ports: "80,443,8080"
  - tool: nikto
    priority: 2
    params:
      ssl: true

Advanced Example

webapp_pentest:
  - tool: nmap
    priority: 1
    params:
      ports: "1-1000"
      version_detection: true
  - tool: nikto
    priority: 2
    params:
      comprehensive: true
  - tool: nuclei
    priority: 3
    params:
      severity: "critical,high"
      templates: "web"
  - tool: sqlmap
    priority: 4
    params:
      crawl: 3
      batch: true
      level: 5
  - tool: ffuf
    priority: 5
    params:
      wordlist: "/usr/share/wordlists/dirb/common.txt"
      extensions: "php,html,js"

📝 Tool Chain Parameters

Common Parameters

Parameter	Type	Description
`tool`	string	Tool name (required)
`priority`	int	Execution priority (1 = first)
`params`	object	Tool-specific parameters

Tool-Specific Parameters

nmap

params:
  ports: "1-1000"
  scan_type: "-sS"
  os_detection: true
  version_detection: true
  aggressive: true
  nse_scripts: "vuln,exploit"

nikto

params:
  comprehensive: true
  ssl: true
  no_ssl: false

nuclei

params:
  severity: "critical,high,medium"
  tags: "web,api,cve"
  update: true
  templates: "custom-templates/"

radare2

params:
  analysis: true
  auto: true
  debug: false

volatility

params:
  profile: "Win7SP1x64"
  plugins: true
  output_dir: "./volatility-output"

🔧 Configuration Management

Load Custom Configuration

# Use specific config file
zypheron scan example.com --chain my_chain --config custom-chains.yaml

# Set default config location
export ZYPHERON_CONFIG=~/.zypheron/toolchains.yaml

Validate Configuration

# Check if config is valid
zypheron config validate

# Show current configuration
zypheron config show

List Available Chains

# List all configured chains
zypheron config list-chains

💡 Best Practices

1. Priority Management

Use priority 1 for reconnaissance tools
Use priority 2-3 for scanning tools
Use priority 4-5 for exploitation tools
Higher priorities run first

2. Parameter Optimization

# For fast scans
fast_scan:
  - tool: masscan
    priority: 1
    params:
      rate: 10000
      ports: "80,443"

# For comprehensive scans
deep_scan:
  - tool: nmap
    priority: 1
    params:
      ports: "1-65535"
      version_detection: true
      os_detection: true

3. Conditional Execution

# Use conditions for specific scenarios
conditional_scan:
  - tool: nmap
    priority: 1
    params:
      ports: "1-1000"
    conditions:
      - network_type: "internal"

📊 Examples

Comprehensive Web App Test

full_webapp_test:
  - tool: nmap
    priority: 1
    params:
      ports: "80,443,8080,8443"
      version_detection: true
  - tool: nikto
    priority: 2
    params:
      comprehensive: true
  - tool: nuclei
    priority: 3
    params:
      severity: "all"
      tags: "web,owasp"
  - tool: sqlmap
    priority: 4
    params:
      crawl: 3
      batch: true
  - tool: ffuf
    priority: 5
    params:
      wordlist: "common.txt"

Usage:

zypheron scan https://example.com --chain full_webapp_test

Quick CTF Binary Analysis

ctf_binary:
  - tool: file
    priority: 1
    params:
      detailed: true
  - tool: checksec
    priority: 2
    params:
      file: true
  - tool: strings
    priority: 3
    params:
      min_length: 8
  - tool: ropper
    priority: 4
    params:
      all: true

Usage:

zypheron pwn challenge --chain ctf_binary

Memory Forensics Workflow

memory_forensics:
  - tool: volatility
    priority: 1
    params:
      profile: "auto"
      plugins: "pslist,netscan,hivelist"
  - tool: strings
    priority: 2
    params:
      min_length: 6
      all: true

Usage:

zypheron forensics memory.dump --chain memory_forensics

🔍 Tool Reference

Supported Tools

Tool	Category	Description
nmap	Scan, Recon	Network scanner
masscan	Scan, Recon	Fast port scanner
nuclei	Web, Scan	Vulnerability scanner
nikto	Web, Scan	Web server scanner
httpx	Web, Recon	HTTP probing and tech detection
katana	Web, Recon	Web crawler/spider
gau	Web, Recon	URL discovery from public sources
waybackurls	Web, Recon	Archive URL discovery
assetfinder	Recon	Subdomain discovery
gobuster	Web, Recon	Directory/DNS bruteforce
ffuf	Web	Fast web fuzzer
feroxbuster	Web, Scan	Fast directory discovery
dirsearch	Web, Scan	Web path discovery
wfuzz	Web, API	Web/API fuzzing
dirb	Web, Scan	Web content scanner
whatweb	Web, Recon	Web technology identification
wpscan	Web, Scan	WordPress scanner
kiterunner	API, Recon	API endpoint discovery
newman	API, Test	Postman collection runner
schemathesis	API, Test	OpenAPI-driven API testing
jwt-tool	API, Auth	JWT testing and manipulation
sqlmap	Exploit, Web	SQL injection tool
hydra	Exploit	Network login cracker
hashcat	Password	GPU password recovery
john	Password	John the Ripper password cracker
subfinder	Recon	Subdomain enumeration
amass	Recon	Attack surface mapping
theharvester	OSINT, Recon	Email/subdomain harvesting
sublist3r	Recon	Subdomain enumeration
metasploit	Exploit, Framework	Metasploit Framework
sliver	C2, Post	C2 framework
covenant	C2, Post	C2 framework
empire	C2, Post	PowerShell Empire C2
bloodhound	Post, AD	Active Directory attack paths
mimikatz	Post, AD	Credential extraction
aircrack-ng	Wireless	WiFi security auditing
radare2	Reverse Eng	RE framework
ghidra	Reverse Eng	RE platform
gdb	Reverse Eng	Debugger
checksec	PWN	Binary security checker
pwntools	PWN	CTF framework

🆘 Troubleshooting

Chain Not Found

# List available chains
zypheron config list-chains

# Check configuration file
cat ~/.zypheron/toolchains.yaml

Tool Not Installed

# Check what tools are missing
zypheron tools check

# Install missing tool
zypheron tools install <tool>

Invalid Configuration

# Validate configuration
zypheron config validate

# Show parsing errors
zypheron config validate --verbose

📚 Additional Resources

CLI_REFERENCE.md - Command reference
INSTALL.md - Installation guide
SETUP_AND_USE.md - Setup and usage

Example Configuration: See zypheron-go/config/toolchains.yaml

FilesExpand file tree

TOOL_CHAINS.md

Latest commit

History

TOOL_CHAINS.md

File metadata and controls

🔗 Tool Chains Configuration Guide

📋 Overview

📂 Configuration File

File Structure

🛠️ Available Tool Chains

1. Network Discovery

2. Vulnerability Assessment

3. Reverse Engineering

4. Binary Exploitation (PWN)

5. Digital Forensics

6. API Security Testing

7. AI-Powered Dorking

🎯 Creating Custom Tool Chains

Basic Example

Advanced Example

📝 Tool Chain Parameters

Common Parameters

Tool-Specific Parameters

nmap

nikto

nuclei

radare2

volatility

🔧 Configuration Management

Load Custom Configuration

Validate Configuration

List Available Chains

💡 Best Practices

1. Priority Management

2. Parameter Optimization

3. Conditional Execution

📊 Examples

Comprehensive Web App Test

Quick CTF Binary Analysis

Memory Forensics Workflow

🔍 Tool Reference

Supported Tools

🆘 Troubleshooting

Chain Not Found

Tool Not Installed

Invalid Configuration

📚 Additional Resources