Argus — web and LLM vulnerability scanner

★ 8.2 · security

argus gives Claude Code a single suite of six automated scanners targeting high-value web and LLM vulnerability classes. Coverage spans CORS misconfiguration (origin reflection, null origin, credentialed reads), CRLF and host-header injection, NoSQL injection (MongoDB operator auth-bypass and time-based blind `$where`), JWT attacks (alg:none, RS256→HS256 confusion, secret cracking), out-of-band confirmation of blind SSRF/XXE/SQLi/RCE/Log4Shell via interactsh callbacks, and LLM red-teaming across six payload categories including prompt injection, jailbreak, and system-prompt leak. All tools are pure Python with no added dependencies, and core logic runs offline. Built for penetration testers and bug bounty hunters who need to prove blind vulnerabilities — the OOB scanner bridges the entire band of Critical findings that produce no in-band signal and would otherwise be un-submittable.