How 1diot9/vulnhunter-white works
VulnHunter-White is an LLM-driven white-box vulnerability discovery and review application. Users import a GitHub repository or ZIP, configure audit options, and run a staged workflow: reconnaissance and optional code indexing, one or more mining paths, reviewer validation, and optional internet verification and attack-chain analysis. The React UI presents project controls, live logs, reports, and confirmed findings. The README documents the major workflow and capabilities; source excerpts are partial, so some internal links are documented rather than verified at call sites.
Main entry points: pipeline.py Audit Orchestrator · phase_worker.py Vulnerability Worker · phase_reviewer.py Reviewer · App.tsx Web App
Components 23
User Experience
- Web App
frontend/src/App.tsx - Project Workspace
frontend/src/pages/ProjectDetailPage.tsx - Findings and Reports
frontend/src/pages/VulnsPage.tsx
Audit Orchestration
- Repository Import
backend/app/services/ingest.py - Audit Orchestrator
backend/app/services/pipeline.py
Analysis and Review
- Recon and Mining Paths
backend/app/mining_paths.py - Code Intelligence
backend/app/code_intelligence/service.py - Vulnerability Worker
backend/app/tools/phase_worker.py - Reviewer
backend/app/tools/phase_reviewer.py - Audit Modes
backend/app/audit_mode.py - CodeGraph and JAR Index
backend/app/code_intelligence/cli.py
Verification and Results
- Dynamic Verification
backend/app/dynamic_verify.py - Docker Lab
backend/app/services/lab.py - Internet Verifier
backend/app/services/verifier.py - Attack Chains
backend/app/tools/phase_attack_chain.py - Reports and Advisory
backend/app/services/report.py
Application Platform
- Backend APIs
backend/app/api - Project and Findings Store
backend/app/models.py - Agent Tool Dispatch
backend/app/tools/__init__.py - Live Event Logs
backend/app/services/live_log.py
Other components
- Auditor
- LLM Provider
- GitHub and FOFA
Connections 28
- Auditor → Web App: uses
README.md - Web App → Project Workspace: routes to
frontend/src/App.tsx - Web App → Findings and Reports: routes to
frontend/src/App.tsx - Project Workspace → Backend APIs: configures projects
- Findings and Reports → Backend APIs: views findings
- Auditor → Repository Import: imports source
README.md - GitHub and FOFA → Repository Import: provides repository
README.md - Repository Import → Audit Orchestrator: starts audit
README.md - Audit Orchestrator → Recon and Mining Paths: runs reconnaissance
README.md - Audit Orchestrator → Code Intelligence: optionally indexes
README.md - Code Intelligence → CodeGraph and JAR Index: builds indexes
backend/app/code_intelligence/service.py - Audit Orchestrator → Vulnerability Worker: runs mining
README.md - Vulnerability Worker → Reviewer: submits findings
README.md - Audit Orchestrator → Reviewer: runs review
README.md - Audit Orchestrator → Audit Modes: applies modes
backend/app/services/pipeline.py - Reviewer → Dynamic Verification: optionally verifies
README.md - Dynamic Verification → Docker Lab: uses lab
backend/app/dynamic_verify.py - Audit Orchestrator → Internet Verifier: optionally verifies online
README.md - Audit Orchestrator → Attack Chains: optionally links findings
README.md - Reviewer → Reports and Advisory: produces reports
README.md - Audit Orchestrator → Agent Tool Dispatch: dispatches tools
backend/app/main.py - Agent Tool Dispatch → Vulnerability Worker: registers worker tools
backend/app/tools/__init__.py - Audit Orchestrator → LLM Provider: requests analysis
README.md - Audit Orchestrator → Project and Findings Store: tracks project state
backend/app/services/pipeline.py - Vulnerability Worker → Project and Findings Store: records findings
backend/app/tools/phase_worker.py - Audit Orchestrator → Live Event Logs: emits progress
backend/app/code_intelligence/service.py - Internet Verifier → GitHub and FOFA: queries FOFA
README.md - Reports and Advisory → Findings and Reports: shown as results