Aegis

Overview

What is it?

Aegis is a web application security scanner for systems you own or are explicitly authorized to test. It ships as a single pentest binary with no Python and no runtime dependencies — cargo build produces two static binaries, detection-only and dry-run by default.

Coverage

What it checks

• 30 DAST modules — spanning the OWASP Top 10: SQLi, NoSQLi, command injection, SSTI, path traversal, XXE, SSRF, IDOR, JWT weaknesses, CORS misconfiguration, and more.
• 6 SAST rules — tree-sitter rules for SQLi concatenation, command exec/eval, unsafe deserialization, weak crypto, path traversal, and hardcoded secrets across Rust/TS/JS/Python.
• CVE matching — cross-references findings against OSV.dev and NVD, with full CVE record fetch.
• Out-of-band collaboration — a companion collaborator binary listens for blind SSRF and stored-XSS callbacks.

Design

How it works

Everything runs through one CLI: a dry run prints the plan without sending anything, --confirm executes it. It crawls links and forms automatically and fuzzes every parameter it finds, or targets a single parameter with -p. Static analysis (--src) runs standalone against a local source tree, no live target required.