674462bef3
- Restore full v4: API keys, /api/scan, /docs, /openapi.json, /mcp MCP endpoint, subscriptions, AD-audit + creds scans - Add missing /api/login (premium owner login, permanent sub key) - Fix agent_report CoT leak: enable_thinking:false + reasoning_effort:low - Add Ollama fallback chain (.128 qwen3.8fast -> .186 ornith-1.5:9b) - Fix Kali API params: naabu uses 'host', wpscan uses 'url' - Fix creds_scan hydra contract (target+service+username) - Fix run_osint: missing 'ssh' command (sshpass -p X ssh -o ...) - Harden sub_active against naive datetime
ARGUS — Autonomous Security Agent
Rentable AI security agent platform. Customers submit a target, pay in Bitcoin (sats), and an AI agent runs a real offensive toolkit against it — then interprets the results into a professional report rendered live in the browser.
Capabilities
- Web Vulnerability Scan — nuclei + ffuf + nmap + subfinder against a target (4,000 sats)
- OSINT Investigation — sherlock + theHarvester + sublist3r deep recon (2,500 sats)
- Continuous Monitoring — scheduled re-scans with change alerting (15,000 sats/mo)
Architecture
| Layer | Implementation |
|---|---|
| Frontend | Flask, premium animated UI (canvas particle field) |
| Agent | qwen3.8fast @ shadow-death (.128) — interprets raw output into reports |
| Web vuln tooling | SUPERkali (.177) — nuclei / ffuf / nmap / subfinder / httpx |
| OSINT tooling | OSINT VM (.66) — sherlock / theHarvester / sublist3r / spiderfoot |
| Payments | BTCPay (store 5L7HDf8...), Bitcoin on-chain + Lightning, no KYC |
| Host | Proxmox CT 705 @ 10.30.20.81, public via argus.thetempleofdoom.com |
Deployment
# app lives at /opt/argus/app.py, runs as systemd unit argus.service
systemctl restart argus
License
MIT