How r-s0n/ars0n-framework works
Ars0n Framework is a bug-bounty reconnaissance and application/cloud security testing framework, paired with a web UI for managing targets and reviewing findings. The documented Wildfire workflow starts from GUI-selected root domains, prioritizes older scan data, then runs chosen submodules; the GUI also manages FQDN records through an API backed by MongoDB. The toolkit service launches Wildfire and exposes scan status. The tree and excerpts support these boundaries, but do not show the internal call graph among most toolkit modules, so those links are omitted.
Main entry points: App.js Web application · Controller.js Request controller · wildfire.py Wildfire runner · Fqdn.js Target view
Components 23
Target management UI
- Web application
client/src/App.js - Target view
client/src/Views/Fqdn.js - Findings dashboard
client/src/Components/Dashboard.js - Recon interface
client/src/Components/Recon.js - Enumeration interface
client/src/Components/Enumeration.js - CVE testing interface
client/src/Components/CveTesting.js
Data API
- Express server
server/server.js - API routes
server/routes/Routes.js - Request controller
server/controllers/Controller.js - FQDN records
server/models/fqdn.model.js - URL records
server/models/url.model.js - CVE records
server/models/cve.model.js - Scan logs
server/models/log.model.js
Scan orchestration
- Toolkit service
toolkit/toolkit-service.py - Wildfire runner
toolkit/wildfire.py - Scan status
toolkit/toolkit-service.py
Reconnaissance
- Domain discovery
toolkit/toolkit - Cloud discovery
toolkit/toolkit - Result consolidation
toolkit/toolkit/clear_sky.py
Security testing
- Nuclei scan modules
toolkit/toolkit - Web test modules
client/src/Components/SubComponents
Other components
- Researcher
- Burp Suite API
Connections 24
- Researcher → Web application: manages targets
- Web application → Target view: selects target
- Web application → Express server: requests records
- Express server → API routes: dispatches
- API routes → Request controller: invokes handlers
- Request controller → FQDN records: reads/writes
- Request controller → URL records: reads/writes
- Request controller → CVE records: reads/writes
- Request controller → Scan logs: reads/writes
- Web application → Toolkit service: starts Wildfire
- Toolkit service → Wildfire runner: runs script
- Toolkit service → Scan status: updates status
- Web application → Toolkit service: polls status
- Wildfire runner → Domain discovery: runs selected modules
- Wildfire runner → Cloud discovery: runs selected modules
- Web application → Target view: displays findings
- Target view → Findings dashboard: shows summary
- Target view → Recon interface: opens recon
- Target view → Enumeration interface: opens enumeration
- Target view → CVE testing interface: opens CVE testing
- Request controller → Burp Suite API: starts scans
- Wildfire runner → Result consolidation
- Wildfire runner → Nuclei scan modules
- Wildfire runner → Web test modules