I constructed a scripting language particularly for pentesting — Spectator. Would love your sincere suggestions – Releases

Hey everybody,

I’ve been engaged on a mission for some time that I feel solves an actual downside many people face: the fragmentation of our safety workflows. We bounce between Bash for glue, Python for scripting, separate instruments for recon, internet testing, and exploitation, after which manually sew collectively reviews.

I wished one thing that unified all of that. So I constructed Spectator — a purpose-built scripting language for cybersecurity work.

What it’s:

Spectator is a compiled language with built-in safety modules, a local GUI framework, and a package deal supervisor — all in a single standalone binary. No dependencies, no pip set up chains, no surroundings setup.

Right here’s a fast recon instance:

goal = "``scanme.nmap.org``"
ips = resolve(goal)
Hint("IPs: " --> be a part of(ips, ", "))
do --> PortScan(goal, 1, 1024)
do --> SSLInfo(goal)

And right here’s the way you’d construct a easy GUI pentest software:

#Import Spec.GUI
open.window({"title": "Ghost Recon", "bg": "#070b14", "accent": "#00d4aa"})
GUI.enter("goal", "Enter goal...")
GUI.button("Scan", "run", {"coloration": "#00d4aa"})
GUI.output("out", {"peak": 400})
GUI.on("run", func() {
t = GUI.get("goal")
ips = resolve(t)
every ip : ips { GUI.print("out", " IP: " --> ip) }
})
finish()

Key options:

• Constructed-in safety modules — Recon, OSINT, Internet, Exploitation, Fuzzing, Payloads, Crypto, Encoding, Hashing (177 built-in features complete)

• Native GUI framework — Construct actual desktop safety instruments with out Electron or internet frameworks

• Full HTTP engine — Periods, fuzzing, multi-request, extraction

• Mission Engine — Structured pentest pipeline with HTML report technology

• Area package deal supervisor — SHA-256 verified library installs (supply-chain assaults blocked by default)

• Cross-compilation — Construct standalone binaries for Home windows, Linux, macOS, FreeBSD, ARM

• Single binary — No runtime, no dependencies, totally self-contained

Platform help:
CLI/TUI works on Home windows, Linux, and macOS. GUI help is at the moment Home windows-focused (WebView2), with Linux/macOS help by way of WebKitGTK/WKWebView accessible however much less mature.

What I’m in search of:

I do know that is an formidable mission. I’m not right here to say it replaces Python or Bash for every little thing — it doesn’t. However I feel it fills a spot for safety professionals who desire a quicker, extra unified solution to script their workflows.

I’d genuinely love your suggestions:

1. Does this clear up an issue you even have?

2. What’s lacking that may make it helpful to your workflow?

3. Any considerations concerning the method?

Hyperlinks:

In the event you strive it out, let me know what you assume. I’m actively creating this and each piece of suggestions helps.

Thanks for studying.

1 Vital level to notice:

I’ve been constructing this software for 2 years. I’d recognize it for those who starred the repo. There may be some points with this programming language, however I’ll work exhausting to repair them.