How r-s0n/ars0n-framework-v2 works
Ars0n Framework v2 is a bug-bounty workflow platform that guides authorized target testing, wraps reconnaissance and scanning tools, and retains results for attack-surface analysis. Its main user journey runs from target and scope setup through asset discovery, URL/endpoint work, scanning, and review; learning guidance and browser-assisted capture support that journey. The repository also exposes workflows through an MCP server and includes a target-behavior probe. Edges reflect README statements and shown source references; some subsystem connections remain unverified because their wiring was not sampled.
Main entry points: main.go Framework API · database.go Results database · App.js Framework UI · index.js MCP assistant tools
Components 20
Framework application
- Framework UI
client/src/App.js - Framework API
server/main.go - Results database
server/database.go - Targets and scope
server/utils/scopeTargetUtils.go
Recon and testing
- Asset discovery
server/utils/autoScanOrchestrator.go - Company assets
server/utils/companyTools.go - URL workflows
server/utils/urlScanUtils.go - Endpoint analysis
server/utils/endpointInvestigationUtils.go - Vulnerability scans
server/utils/nucleiUtils.go - Target behavior probe
docker/waf-probe/waf_probe.py - Finding triage
server/utils/triageRun.go - Auth flows and sessions
server/utils/authFlowsUtils.go
Assistant and capture
- Browser capture
extension/background.js - MCP assistant tools
docker/mcp-server/src/index.js - MCP auth tools
docker/mcp-server/src/tools/authsessions.js - MCP authorization tools
docker/mcp-server/src/tools/authz.js
Learning and analysis
- Methodology lessons
client/src/data/lessons.js - Attack surface review
server/utils/attackSurfaceAssetManagement.go - Document Q&A service
ai_service/main.py
Other components
- Security researcher
Connections 25
- Security researcher → Framework UI: uses
- Framework UI → Framework API: submits workflows
- Framework API → Results database: persists results
- Framework API → Targets and scope: manages scope
- Framework API → Asset discovery: orchestrates discovery
- Framework API → Company assets: runs asset tools
- Framework API → URL workflows: runs URL tools
- Framework API → Endpoint analysis: supports endpoint work
- Framework API → Vulnerability scans: runs scanners
- Framework API → Target behavior probe: drives probe
docker/waf-probe/waf_probe.py - Framework API → Finding triage: supports triage
- Framework API → Auth flows and sessions: manages authentication
- Asset discovery → Results database: stores results
- URL workflows → Results database: stores results
- Vulnerability scans → Results database: stores results
- Results database → Attack surface review: feeds asset review
- Framework UI → Methodology lessons: presents lessons
- Security researcher → MCP assistant tools: asks assistant
- MCP assistant tools → MCP auth tools: registers tools
docker/mcp-server/src/index.js - MCP assistant tools → MCP authorization tools: registers tools
docker/mcp-server/src/index.js - MCP auth tools → Framework API: calls API
docker/mcp-server/src/tools/authsessions.js - MCP authorization tools → Framework API: calls API
docker/mcp-server/src/tools/authz.js - Browser capture → Targets and scope: checks capture scope
- Security researcher → Browser capture: captures browser traffic
- Security researcher → Document Q&A service: asks document questions
ai_service/main.py