jonsjava/kitelon repository overview

⁠Kitelon

Kitelon is an open-source security automation platform for authorized reconnaissance, vulnerability scanning, and reporting. It orchestrates tools like nmap, httpx, nuclei, subfinder, testssl.sh, and others through a CLI-first workflow with workspace-based loot, a PostgreSQL job queue, and a local Web UI.

Source code: github.com/jonsjava/kitelon⁠

⁠Tags

⁠Quick start (CLI)

docker pull jonsjava/kitelon:latest

# Help / one-off scan (needs raw sockets for nmap etc.)
docker run -it --rm \
  --cap-add=NET_RAW --cap-add=NET_ADMIN \
  jonsjava/kitelon:latest help

docker run -it --rm \
  --cap-add=NET_RAW --cap-add=NET_ADMIN \
  jonsjava/kitelon:latest \
  kitelon -t scanme.nmap.org -w demo

⁠Full stack (PostgreSQL + Web UI + worker)

Clone the repo and use Compose (recommended for persistent loot, jobs, and the Web UI):

git clone https://github.com/jonsjava/kitelon.git
cd kitelon
cp docker/env.example .env    # set POSTGRES_PASSWORD
docker compose up -d
# Web UI → http://127.0.0.1:8080

Loot and logs persist in Docker volumes. See README — Docker⁠ for profiles, env vars, and scan examples.

⁠What's in the image

• CLI: kitelon (scans), kitelon-cli (interactive console)
• Engine: nmap, httpx, nuclei, ffuf, subfinder, naabu, dnsx, katana, tlsx, testssl.sh, dirsearch, enum4linux-ng, Metasploit (auxiliary), and more
• Stack: Python pipelines, PostgreSQL, background workers, cron schedules, FastAPI Web UI

⁠License

MIT — LICENSE.md⁠