You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
AutoAR is a powerful, highly scalable automated security reconnaissance tool and Discord bot specifically designed for bug bounty hunters and penetration testers. It automates gathering subdomains, scanning ports, detecting technologies, mapping GitHub repositories, fuzzing, testing vulnerabilities, and executing AI analysis.
4
+
5
+
## 🚀 Key Features
6
+
7
+
-**Centralized Discord Command Hub**: Run, monitor, and manage full reconnaissance workflows directly from a Discord interface using slash commands.
8
+
-**Granular & Automated Workflows**:
9
+
-`/domain_run`: A comprehensive, fully-automated recon and vulnerability assessment pipeline for an entire root domain.
10
+
-`/subdomain_run`: A focused, deep-dive workflow targeting a single specific subdomain (including port scanning, exposure checks, and nuclei profiling).
11
+
-`/lite_scan` & `/fast_look`: Scalable scanning options designed to quickly summarize targets while skipping heavy fuzzing execution.
12
+
-**Comprehensive Infrastructure Mapping**: Integrates seamlessly with Subfinder, Amass, crt.sh, Wayback Machine, and Chaos to enumerate subdomains and live hosts.
13
+
-**AI Brain & Natural Language Processing**:
14
+
- Send direct natural language instructions via `/ai` (e.g., *"Do a quick scan on example.com for zero-days"*).
15
+
- Use `/brain` to feed scan records to an AI model (Gemini/OpenRouter), allowing it to intelligently analyze the output and suggest follow-up attacks or generate exploit `curl` commands.
16
+
-**Continuous Vulnerability Assessment**:
17
+
-`/nuclei`: Continuous targeted exposure monitoring using customized templates.
18
+
-`/zerodays`: Specialized rapid verification scanners for the newest active Zero-Day vulnerabilities.
19
+
-**Advanced Target Deep Dives**:
20
+
- Intelligent JavaScript endpoint and secrets extraction.
21
+
- Mobile application security scanning (`/apkx_scan`, `/apkx_ios`).
22
+
- Active Misconfiguration testing, S3 Bucket detection, and GitHub source code exposure scanning.
2
23
3
-
AutoAR is an automated security reconnaissance tool and Discord bot for bug bounty hunters and penetration testers. It automates gathering subdomains, scanning ports, detecting technologies, mapping GitHub repositories, fuzzing, testing vulnerabilities, and AI analysis.
24
+
---
25
+
26
+
## 📋 Available Commands
4
27
5
-
## Features
28
+
AutoAR provides an extensive toolkit of over 30 Discord commands to orchestrate your workflow:
6
29
7
-
-**Discord Bot Interface**: Run and manage full reconnaissance workflows from Discord commands (`/domain_run`, `/subdomain_run`, `/brain`, etc.).
8
-
-**Subdomain Enumeration**: Subfinder, amass, crt.sh, wayback machine and chaos integration.
9
-
-**Port Scanning**: Naabu integration for continuous port scanning.
10
-
-**Vulnerability Scanning**: Nuclei templates for continuous exposure monitoring.
11
-
-**AI Brain**: AI-driven analysis of discovery logs, automated follow-up commands (`curl`, `nmap` scanning) via Gemini and OpenRouter using the `/brain` command.
*(Type `/help` in your Discord server for a completely categorized view of all features.)*
15
38
16
39
---
17
40
18
-
## Prerequisites
41
+
## ⚙️ Prerequisites
19
42
20
43
Ensure you have the following installed on your host or Docker environment:
21
44
-**Go** (1.21+ recommended)
22
45
23
-
*(AutoAR handles security tools and utilities internally via Go modules and libraries.)*
46
+
*(AutoAR gracefully handles security tools and utilities internally via Go modules and system libraries.)*
24
47
25
-
## Installation & Setup
48
+
---
49
+
50
+
## 🛠️ Installation & Setup
26
51
27
52
There are two primary ways to install and run AutoAR:
28
53
29
54
### Option 1: Quick Install using `go install`
30
-
Because the main executable is located in the `cmd/autoar` directory, you cannot simply run `go install github.com/h0tak88r/AutoAR@latest`. Instead, you must point directly to the binary package:
55
+
Because the main executable is located in the `cmd/autoar` directory, you cannot simply run `go install github.com/h0tak88r/AutoAR@latest`. Instead, point directly to the binary package:
31
56
32
57
```bash
33
58
go install github.com/h0tak88r/AutoAR/cmd/autoar@latest
@@ -58,12 +83,12 @@ go install github.com/h0tak88r/AutoAR/cmd/autoar@latest
58
83
Copy the provided `.env.example` or tailor your `.env` in the root directory. AutoAR relies strictly on these environment variables:
59
84
60
85
-**DISCORD_BOT_TOKEN**: Your Discord Bot Token (Bot must have `applications.commands` and standard message intents).
61
-
-**DISCORD_ALLOWED_GUILD**: Restricts the bot exclusively to your own Guild (Server) Name.
86
+
-**DISCORD_ALLOWED_GUILD_ID**: Restricts the bot exclusively to your own Guild (Server) ID.
62
87
-**DB_TYPE**: `postgresql` or `sqlite3`
63
88
-**DB_HOST**: Your connection URI or sqlite path.
64
89
-**OPENROUTER_API_KEY** / **GEMINI_API_KEY**: API key for your AI Analysis features.
65
90
-**AUTOAR_RESULTS_DIR**: Set to `./new-results` or `/app/new-results` if running via Docker.
66
-
-**Additional Integrations**: Shodan, Censys, VirusTotal, R2 Storage IDs as needed in `.env`.
91
+
-**Optional Integrations**: Shodan, Censys, VirusTotal, R2 Storage IDs as needed.
67
92
68
93
5.**Run the Bot or API:**
69
94
Run the bot natively, ensuring `.env` is loaded automatically:
@@ -78,7 +103,9 @@ go install github.com/h0tak88r/AutoAR/cmd/autoar@latest
0 commit comments