How fulcanellir/nigredo works
nigredo is an authorized penetration-testing orchestrator with separate passive recon and active-scan engines. Its main workflow takes client domains and authorized targets as distinct inputs, gathers recon and scan results, then consolidates them into a workbook. The README documents these capabilities and the high-level flow, but no source excerpts were provided; edges therefore represent documented relationships, not inspected call sites.
Components 20
Engagement control
- Recon domains
- Authorized targets
- Scope allowlist
- Engagement runner
Recon engine
- Recon orchestrator
- Surface enumeration
- OSINT and credentials
- Web crawler
Active scanning
- Scan pipeline
- Port and service scans
- Web probing
- Content discovery
- Vulnerability checks
- TLS and SSH audits
Enrichment and reporting
- Nessus ingestion
- Finding enrichment
- Workbook report
Other components
- Operator
- External security tools
- OSINT API services
Connections 24
- Operator → Engagement runner: starts run
README.md - Operator → Recon domains: provides domains
README.md - Operator → Authorized targets: provides targets
README.md - Operator → Scope allowlist: sets allowlist
README.md - Engagement runner → Recon orchestrator: runs recon
README.md - Engagement runner → Scan pipeline: runs scan
README.md - Recon domains → Recon orchestrator: feeds domains
README.md - Authorized targets → Scan pipeline: feeds targets
README.md - Scope allowlist → Scan pipeline: gates targets
README.md - Recon orchestrator → Surface enumeration: enumerates
README.md - Recon orchestrator → OSINT and credentials: harvests OSINT
README.md - Recon orchestrator → Web crawler: crawls apps
README.md - Recon orchestrator → External security tools: invokes tools
README.md - OSINT and credentials → OSINT API services: queries services
README.md - Scan pipeline → Port and service scans: scans ports
README.md - Scan pipeline → Web probing: probes hosts
README.md - Scan pipeline → Content discovery: discovers content
README.md - Scan pipeline → Vulnerability checks: checks vulnerabilities
README.md - Scan pipeline → TLS and SSH audits: audits protocols
README.md - Scan pipeline → External security tools: invokes tools
README.md - Nessus ingestion → Finding enrichment: reconciles findings
README.md - Finding enrichment → Workbook report: feeds findings
README.md - Recon orchestrator → Workbook report: contributes results
README.md - Scan pipeline → Workbook report: contributes results
README.md