Autoscout

A comprehensive Recon & Vulnerability Analysis Framework with AI-driven orchestration.

Autoscout automates popular bug bounty hunting tools into a unified platform, featuring deep integration with Burp Suite and AI-powered reasoning backends (Ollama, Gemini, Codex).

• AI Orchestrator: Uses LLMs to analyze HTTP traffic and decide which security tools to run (Dalfox, SQLMap, Nuclei, FFUF, etc.).
• Burp Suite Integration: Seamlessly captures traffic from Burp and feeds it into the AI analysis pipeline.
• Deep Traffic Analysis: Captures full HTTP context, including Method, URL, Headers, and Body (Base64 decoded).
• Stealth & Rate Limiting: AI-managed rate limiting to prevent IP blocking on major platforms.
• AI Training (Knowledge Base + Skills): Customize the AI's reasoning with global notes in ~/.config/autoscout/knowledge.md and focused Markdown skills in ~/.config/autoscout/skills.
• Dynamic Wordlist Resolution: Automatically finds or generates wordlists for fuzzing tools.
• Multi-Mode Operation:
  • Daemon Mode: Continuous automated scanning.
  • SSH Mode: Access the GUI and control center over SSH (port 2222).
  • GUI Mode: Interactive Terminal UI for real-time monitoring.

go install -v github.com/HaythmKenway/autoscout@latest

1. Notify: Setup $HOME/.config/notify/provider-config.yaml.
2. User Config: Global settings at $HOME/.config/autoscout/user-config.yaml.
3. AI Training: Add global heuristics to $HOME/.config/autoscout/knowledge.md.
4. AI Skills: Add focused Markdown playbooks as $HOME/.config/autoscout/skills/*.md or $HOME/.config/autoscout/skills/<name>/SKILL.md.

Example skill:

# IDOR Review

Use this when URLs include account, user, org, invoice, file, or UUID identifiers.

- Compare object IDs across roles.
- Flag missing tenant scoping on nested API routes.
- Prefer low-rate verification with ffuf or a manual replay action.

• Subdomain Enumeration & Tracking
• Discord/Slack Notifications
• Burp Suite Extension for Traffic Ingestion
• AI-Powered Tool Selection & Execution
• Full HTTP Context Analysis (Headers/Body)
• Automated Rate Limiting & Stealth
• Custom Knowledge Base for AI Training
• Validating and Processing all the URLs
• Port Scanning & Service Discovery

Built for automation. Driven by AI.