cyberful

What the README says you get

• Other
  Multi-agent orchestrationuses a multi-agent system to orchestrate 316 cybersecurity tools
• Other
  316 cybersecurity tools316 cybersecurity tools, including 203 command-line applications and commands
• Other
  Nmap, Metasploit, Nucleisuch as Nmap, Metasploit, and Nuclei, alongside ZAP and Ghidra
• Other
  Deterministic control planea deterministic control plane enforces scope and preserves evidence
• Other
  Reproduced vulnerability reportsonly independently reproduced vulnerabilities reach reports
• Other
  Docker runtime imageincluded in the runtime image
• Other
  ZAP proxy canary checkan ephemeral private-network HTTPS canary verifies that curl/OpenSSL
• Other
  Host-scoped rate limitinghost-scoped rate limit and mandatory public request headers in ZAP
• Other
  Passive ZAP checkpointsthe host records a best-effort passive ZAP checkpoint
• Other
  Hardened agent-browser forkembeds its pinned hardened agent-browser fork
• Other
  Isolated Chrome browsingprepares an isolated compatible Chrome for agent-controlled browsing
• Other
  ATT&CK snapshot embeddingembeds the resulting snapshot in every standalone binary
• Other
  CVE Dictionaryprepares the release-pinned CVE Dictionary in the foreground
• Other
  Headless workflow CLIStart a specific headless workflow with `cyberful run --workflow bug-bounty

Extracted from the kit's README by a local AI model (deepseek-flash) on Sep 29, 2026. Every item is checked against an exact README quote. A README claim is the maker's description, not something we tested.