BlueWhale is a high-fidelity vulnerability orchestration platform engineered for advanced offensive-defensive auditing. It is designed around a deterministic execution core, an optional intelligence layer, and a unified evidence pipeline.

1. Deterministic First: All vulnerability detection is grounded in reproducible, evidence-based logic. No model is required to validate findings.
2. Model as Augmentation: LLMs assist in classification, triage, and summarization but never act as the primary source of truth.
3. Evidence-Centric: Every action produces artifacts (HTTP responses, DOM snapshots, storage dumps) that form the authoritative dataset.
4. Modular Execution: Each capability is an independent command, suitable for CI/CD or targeted manual audits.

• Kinetic Core (Go): High-performance network engine with custom TCP/TLS stacks and PID-controlled rate limiting.
• Orchestral Layer (Rust): High-speed LLM management for parallel mutation and analysis.
• Cognitive Core (Python): Orchestration plane that manages the lifecycle, evidence pipeline, and deterministic rules.

• Python 3.11+
• Go 1.26.2+
• Rust (Cargo) 1.75+
• Ollama (Optional for AI features)

1. Initialize Environment:

   python3 -m venv venv
   source venv/bin/activate
   pip install -r requirements.txt

2. Setup Browser Engine:

   playwright install chromium

3. Bootstrap Binaries:

   python3 main.py bootstrap --force

BlueWhale uses a modular command structure. Each command can be run independently.

Prepare the workspace and configuration.

python3 main.py init

Perform endpoint probing and browser-based rule detection.

python3 main.py scan --target http://example.com

SPA navigation and hidden route discovery.

python3 main.py crawl --target http://example.com --depth 3

Multi-role session validation and authorization boundary testing.

python3 main.py auth --target http://example.com --roles admin,user

Extract localStorage, IndexedDB, and hidden API endpoints.

python3 main.py loot --target http://example.com

Triage findings using the optional Intelligence Plane.

python3 main.py analyze --model ollama
# Or disable AI completely
python3 main.py analyze --no-llm

Generate technical reports from the evidence plane.

python3 main.py report --format json --output results/

All findings map to stored artifacts in data/evidence/:

• Artifacts: Raw HTTP data, DOM snapshots, Screenshots.
• Findings: Verified vulnerabilities linked to specific artifacts.

BlueWhale is for authorized security testing only. The author is not responsible for any misuse or damage caused by this platform.