菜单
Argus — all-in-one information gathering & reconnaissance toolkit. 135 modules covering network infrastructure, web app analysis, and security/threat intelligence. Use for domain recon, subdomain enum, SSL analysis, tech stack detection, vulnerability scanning, and OSINT.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
Manage secrets via Bitwarden CLI (bw). Use when pulling secrets into a shell session, creating/updating Secure Notes from .env files, listing vault items, or setting up Bitwarden on a new machine. Secrets live in Bitwarden, get loaded into memory on demand, and die with the shell session — no files on disk.
Develop a thorough, step-by-step specification for a given idea
Set up a recurring build tracker cron job for any GitHub repo. Runs a zero-LLM shell script to detect stale PRs, stale assigned issues, and phase progress, then posts to a Discord channel only when there's something actionable. Use when asked to "track this build every N hours", "prod agents on a project", "set up a build monitor", "watch this repo for stale work", or similar. The tracker is cheap to run — script does all the work, the agent only speaks when findings exist.
Run long-running coding tasks in cloud environments (Claude Code or Codex), with session teleporting and automatic PR creation.
Delegate coding tasks to subagents or run Claude Code/Codex in tmux sessions. Use the Task tool for focused multi-step coding work. Use tmux for long-running interactive sessions, parallel worktree-based fixes, and PR reviews. NOT for simple single-file edits — do those directly.
Create well-formatted git commits for changes made during the session
基于 SOC 职业分类
| name | argus |
| description | Argus — all-in-one information gathering & reconnaissance toolkit. 135 modules covering network infrastructure, web app analysis, and security/threat intelligence. Use for domain recon, subdomain enum, SSL analysis, tech stack detection, vulnerability scanning, and OSINT. |
| user-invocable | true |
| version | 2.0.0 |
Argus is a Python-based toolkit with 135 modules across three categories:
DNS records, WHOIS, open ports, SSL chain analysis, traceroute, ASN lookup, reverse IP, CDN detection, BGP route analysis, IPv6 reachability, etc.
CMS detection, tech stack detection, crawler, directory finder, email harvesting, sitemap parsing, social media presence, CORS scanner, hidden parameter discovery, JavaScript analysis, etc.
Subdomain enumeration, subdomain takeover, SSL Labs report, Shodan recon, Censys recon, VirusTotal scan, data leak detection, firewall detection, malware/phishing check, JWT token analyzer, exposed API endpoints, git repo exposure, SPF/DKIM/DMARC validation, etc.
Installed via pipx at ~/.local/bin/argus (v2.0.0).
argus
Then use the interactive shell:
argus> modules # List all 135 modules
argus> modules -d # List with descriptions
argus> search ssl # Search modules by keyword
argus> use 12 # Select module (e.g., SSL Chain Analysis)
argus> set target example.com
argus> set threads 10
argus> run # Execute
| Command | Description |
|---|---|
modules | List all 135 modules |
modules -d | List with descriptions |
search <keyword> | Search modules |
use <number> | Select module |
set target <domain> | Set target |
set threads <n> | Set thread count |
run | Run selected module |
runall <category> | Run all modules in category (infra/web/security) |
profile speed | Apply speed profile |
viewout | View cached output |
grepout "pattern" | Search output |
Argus is primarily a TUI tool. For scripted/automated use, pipe commands:
echo -e "use 18\nset target example.com\nrun\nexit" | argus
Quick domain overview:
argus> use 5 # Domain Info
argus> set target getwololo.dev
argus> run
SSL/TLS audit:
argus> search ssl
argus> use 12 # SSL Chain Analysis
argus> set target getwololo.dev
argus> run
Subdomain enumeration:
argus> use 118 # Subdomain Enumeration
argus> set target getwololo.dev
argus> run
Full infrastructure scan:
argus> runall infra
Associated Hosts, DNS Over HTTPS, DNS Records, DNSSEC, Domain Info, Domain Reputation, HTTP/2+3 Support, IP Info, Open Ports, Server Info, Server Location, SSL Chain, SSL Expiry, TLS Ciphers, TLS Handshake, Traceroute, TXT Records, WHOIS, Zone Transfer, ASN Lookup, Reverse IP, IP Range Scanner, RDAP, NTP Leak, IPv6 Test, BGP Routes, CDN Detection, Reverse DNS, Network Timezone, Geo-DNS, SPF Network
Archive History, Broken Links, Carbon Footprint, CMS Detection, Cookies, Content Discovery, Crawler, Robots.txt, Directory Finder, Email Harvesting, Performance, Quality Metrics, Redirects, Sitemap, Social Media, Tech Stack, Third-Party Integrations, JS Analyzer, CORS Scanner, Login Brute ID, Hidden Params, Clickjacking, Form Grabber, Favicon Hash, HTML Comments, CAPTCHA Check, JS Obfuscation, VHost Fuzzer, Session Cookie, HTML5 Abuse, Autocomplete Vuln
Censys Recon, Certificate Authority, Data Leak Detection, Exposed Env Files, Firewall Detection, Global Ranking, HTTP Headers, HTTP Security, Malware Check, Pastebin Monitor, Privacy/GDPR, Security.txt, Shodan Recon, SSL Labs, SSL Pinning, Subdomain Enum, Subdomain Takeover, VirusTotal, CT Logs, Breached Creds, Cloud Bucket Exposure, JWT Analyzer, Exposed APIs, Git Repo Exposure, Typosquat Checker, SPF/DKIM/DMARC, Open Redirect, WAF Bypass, Security Changelog, Session Hijacking, Rogue Cert Check
show api_status./results/ directory