MCPcopy Index your code
hub / github.com/SpecterOps/Nemesis

github.com/SpecterOps/Nemesis @v2.2.2

Chat with this repo
repository ↗ · DeepWiki ↗ · release v2.2.2 ↗ · + Follow
3,271 symbols 12,344 edges 343 files 1,884 documented · 58%
What it actually does AI analysis from the code graph — generated when you open this
loading…
README
<img src="https://github.com/SpecterOps/Nemesis/raw/v2.2.2/docs/images/nemesis-light.png" alt="Nemesis" style="width: 800px;" />

version 2.0.0 Slack @tifkin_ on Twitter @harmj0y on Twitter @0xdab0 on Twitter Sponsored by SpecterOps


Overview

Nemesis is an open-source, centralized data processing platform that ingests, enriches, and allows collaborative analysis (with humans and AI) of files collected during offensive security assessments.

Nemesis 2.0 is built on Docker with heavy Dapr integration, our goal with Nemesis was to create a centralized file processing platform that functions as an "offensive VirusTotal".

Note: the previous Nemesis 1.0.1 code base has been preserved as a branch

Setup / Installation

Follow the quickstart guide.

Usage

See the Nemesis Usage Guide.

Additional Information

Blog Posts:

Title Nemesis Version Date
Nemesis 2.2 v2.2 Feb 25, 2025
Nemesis 2.0 v2.0 Aug 5, 2025
Nemesis 1.0.0 v1.0 Apr 25, 2024
Summoning RAGnarok With Your Nemesis v1.0 Mar 13, 2024
Shadow Wizard Registry Gang: Structured Registry Querying v1.0 Sep 5, 2023
Hacking With Your Nemesis v1.0 Aug 9, 2023
Challenges In Post-Exploitation Workflows v1.0 Aug 2, 2023
On (Structured) Data v1.0 Jul 26, 2023

Presentations:

Title Date
OffensiveX 2025 Jun 19, 2025
x33fcon 2025 Jun 13, 2025
SAINTCON 2023 Oct 24, 2023
BSidesAugusta 2023 Oct 7, 2023
44CON 2023 Sep 15, 2023
BlackHat Arsenal USA 2023 Sep 15, 2023

Acknowledgments

Nemesis is built on large chunk of other people's work. Throughout the codebase we've provided citations, references, and applicable licenses for anything used or adapted from public sources. If we're forgotten proper credit anywhere, please let us know or submit a pull request!

We also want to acknowledge Evan McBroom, Hope Walker, and Carlo Alcantara from SpecterOps for their help with the initial Nemesis concept and amazing feedback throughout the development process. Also thanks to Matt Ehrnschwender for tons of k3s and GitHub workflow help in Nemesis 1.0!

And finally, shout out to OpenAI and Claude for helping with this rewrite.

Extension points exported contracts — how you extend this code

FileSystemDirectoryReader (Interface)
(no doc) [1 implementers]
projects/frontend/src/types/filesystem.d.ts
DataTransferItem (Interface)
(no doc)
projects/frontend/src/types/filesystem.d.ts
FileSystemEntry (Interface)
(no doc)
projects/frontend/src/types/filesystem.d.ts
FileSystemFileEntry (Interface)
(no doc)
projects/frontend/src/types/filesystem.d.ts
FileSystemDirectoryEntry (Interface)
(no doc)
projects/frontend/src/types/filesystem.d.ts

Core symbols most depended-on inside this repo

get
called by 877
projects/cli/cli/mythic_connector/db.py
get
called by 138
projects/frontend/src/utils/fileCache.js
get_file_enriched_async
called by 89
libs/common/common/state_helpers.py
set
called by 85
projects/frontend/src/utils/fileCache.js
execute
called by 85
projects/agents/agents/base_agent.py
exists
called by 77
libs/file_enrichment_modules/file_enrichment_modules/office_doc/office2john.py
execute
called by 66
libs/file_enrichment_modules/tests/harness/mock_pool.py
get_logger
called by 63
libs/common/common/logger.py

Shape

Method 1,671
Function 1,038
Class 441
Route 75
Struct 30
Interface 16

Languages

Python81%
TypeScript15%
Go4%
C#1%

Modules by API surface

projects/web_api/web_api/main.py83 symbols
libs/nemesis_dpapi/tests/test_keys.py83 symbols
libs/file_enrichment_modules/tests/test_registry_hive.py82 symbols
libs/file_enrichment_modules/file_enrichment_modules/office_doc/office2john.py73 symbols
projects/cli/tests/test_submit.py57 symbols
projects/cli/tests/test_config.py57 symbols
projects/frontend/src/components/FileViewer/FileViewer.jsx47 symbols
projects/web_api/web_api/large_containers.py46 symbols
projects/cli/tests/test_outflankc2_client.py40 symbols
libs/nemesis_dpapi/tests/test_core.py40 symbols
libs/file_enrichment_modules/tests/test_container.py39 symbols
libs/common/common/models.py38 symbols

Datastores touched

litellmDatabase · 1 repos
phoenixDatabase · 1 repos

For agents

$ claude mcp add Nemesis \
  -- python -m otcore.mcp_server <graph>

⬇ download graph artifact