cysecurity/darwis-taka repository overview

⁠DARWIS Taka

Fast, modular web vulnerability scanner built in Rust. Combines a rule-based detection engine with optional AI-assisted verification to find and confirm vulnerabilities in web applications and APIs. Ships as a single container with a web panel.

⁠Features

• Broad vulnerability coverage - SQL injection, XSS, SSRF, LFI, command injection, XXE, SSTI, open redirects, CORS/CSRF issues, insecure headers and cookies, cache poisoning, request smuggling, GraphQL flaws, and more.
• AI-assisted verification - pluggable LLM backends (Anthropic Claude, OpenAI, Gemini, Groq, or a local Ollama model) review finding evidence to reduce false positives, with optional active verification that suggests extra payloads to confirm a vulnerability. Best results are with Anthropic Claude.
• Intelligent crawler - scope-aware crawling with robots.txt and sitemap support; bundled headless Chromium for JavaScript-rendered applications.
• Web panel - run and monitor scans, configure AI verification, inspect raw HTTP traffic, and browse findings from a browser.
• Reports - downloadable HTML and JSON reports for each scan.
• Single-container deployment - scan engine, web UI, Chromium, and SQLite in one image.

⁠Quick Start

git clone https://github.com/CSPF-Founder/taka-docker.git
cd taka-docker
docker compose up -d

Access the panel at http://localhost:7331⁠.

⁠Requirements

• Docker Engine 20.10+
• Docker Compose v2
• 2 GB RAM minimum (4 GB recommended when using the browser-based crawler)
• 2 GB disk space

⁠Documentation

Full deployment guide, configuration reference, and troubleshooting: GitHub⁠