-
-
Horcrux CLI launch
-
Help page for commands
-
Doctor page to check tool install
The Story
I built HORCRUX around a problem I kept coming back to in security assessments: the tools are powerful, but the actual investigation is still scattered across them.
As a solo developer, I wanted to build something that could bring reconnaissance, vulnerability intelligence, investigations, evidence, and attack paths into one place, so the researcher could spend less time connecting disconnected results and more time understanding the target.
That idea became HORCRUX.
HORCRUX maintains a persistent model of the target and builds on everything discovered throughout an assessment. It correlates evidence, tracks hypotheses and investigations, highlights gaps in coverage, and helps determine what should be investigated next.
AI plays a supporting role rather than becoming the source of truth. Deterministic security tools and validated evidence stay in control, while AI helps interpret the security state, explain what the evidence means, and guide the next step.
I built HORCRUX with one simple goal: turn fragmented security data into one coherent picture of the attack surface.
The fragments reveal the whole.
Built With
- ffuf
- httpx
- nikto
- nmap
- nuclei
- openvas
- pydantic
- python
- rich
- searchsploit
- typer
- whatweb
