I constructed a scripting language particularly for pentesting — Spectator. Would love your trustworthy suggestions – Releases

Hey everybody,

I’ve been engaged on a mission for some time that I believe solves an actual downside many people face: the fragmentation of our safety workflows. We leap between Bash for glue, Python for scripting, separate instruments for recon, internet testing, and exploitation, after which manually sew collectively reviews.

I wished one thing that unified all of that. So I constructed Spectator — a purpose-built scripting language for cybersecurity work.

What it’s:

Spectator is a compiled language with built-in safety modules, a local GUI framework, and a package deal supervisor — all in a single standalone binary. No dependencies, no pip set up chains, no atmosphere setup.

Right here’s a fast recon instance:

goal = "``scanme.nmap.org``"
ips = resolve(goal)
Hint("IPs: " --> be a part of(ips, ", "))
do --> PortScan(goal, 1, 1024)
do --> SSLInfo(goal)

And right here’s the way you’d construct a easy GUI pentest instrument:

#Import Spec.GUI
open.window({"title": "Ghost Recon", "bg": "#070b14", "accent": "#00d4aa"})
GUI.enter("goal", "Enter goal...")
GUI.button("Scan", "run", {"shade": "#00d4aa"})
GUI.output("out", {"top": 400})
GUI.on("run", func() {
t = GUI.get("goal")
ips = resolve(t)
every ip : ips { GUI.print("out", " IP: " --> ip) }
})
finish()

Key options:

• Constructed-in safety modules — Recon, OSINT, Internet, Exploitation, Fuzzing, Payloads, Crypto, Encoding, Hashing (177 built-in features whole)

• Native GUI framework — Construct actual desktop safety instruments with out Electron or internet frameworks

• Full HTTP engine — Periods, fuzzing, multi-request, extraction

• Mission Engine — Structured pentest pipeline with HTML report technology

• Area package deal supervisor — SHA-256 verified library installs (supply-chain assaults blocked by default)

• Cross-compilation — Construct standalone binaries for Home windows, Linux, macOS, FreeBSD, ARM

• Single binary — No runtime, no dependencies, totally self-contained

Platform assist:
CLI/TUI works on Home windows, Linux, and macOS. GUI assist is presently Home windows-focused (WebView2), with Linux/macOS assist through WebKitGTK/WKWebView obtainable however much less mature.

What I’m in search of:

I do know that is an bold mission. I’m not right here to assert it replaces Python or Bash for every little thing — it doesn’t. However I believe it fills a spot for safety professionals who need a quicker, extra unified solution to script their workflows.

I’d genuinely love your suggestions:

1. Does this remedy an issue you even have?

2. What’s lacking that may make it helpful in your workflow?

3. Any considerations in regards to the strategy?

Hyperlinks:

In the event you strive it out, let me know what you suppose. I’m actively creating this and every bit of suggestions helps.

Thanks for studying.

1 Necessary level to notice:

I’ve been constructing this instrument for 2 years. I might admire it in the event you starred the repo. There may be some points with this programming language, however I’ll work laborious to repair them.