Get scan duration in seconds.

Enable a schedule.

Explicitly close the active session.

Execute a scan in the background. Args: scan_id: Scan identifier

Run a live exploit (stages a payload, opens a session). REQUIRES: - Active EngagementSession with allow_live_exploitation=

Search for exploits using searchsploit.

Export event via webhook. Args: event: Event to export Returns: True if successful

Export event via Syslog. Args: event: Event to export Returns: True if successful

Export event to Elasticsearch. Args: event: Event to export Returns: True if successful

Export event to Splunk HEC. Args: event: Event to export Returns: True if successful

Export result. Args: output_path: Path to save result, or None to return string Returns:

Export multiple events using bulk API. Args: events: Events to export Returns: Tuple of (successful, failed)

Export multiple events in a single request. Args: events: Events to export Returns: Tuple of (successful, fa

Export scheduler data as a report. Args: output_path: Path for output file Returns: True if successful

Export scan results as CSV. Args: scan_id: Scan identifier Returns: CSV file download

Export scan results as JSON. Args: scan_id: Scan identifier Returns: JSON file download

Generate multiple unique passwords.

Generate random string for fuzzing.

Generate a tracking report for a campaign.

Generate a ScanResult from compliance check.

Perform rate-limited GET request.

Get remediation guides for multiple findings. Args: findings: List of findings Returns: Dict mapping finding

Get or create global cache instance. Args: ttl_seconds: Time-to-live for cache entries Returns: ScanCache instan

Get exporter configuration info.

Get exporter configuration info (without secrets).

Get exporter configuration info.

Get exporter configuration info.

Get exporter configuration info.

Get email template by ID.

Get the local path to an exploit file.

Get job by ID.

Get detailed information about a module.

Get module options.

Get specific remediation guidance for a finding. Args: finding_title: Title of the finding to remediate Returns:

Get scan details by ID. Args: scan_id: Scan identifier Returns: ScanResponse with scan details Rais

Get findings for a specific scan. Args: scan_id: Scan identifier Returns: List of findings

Get schedule by ID.

Get scheduler statistics.

Get summary statistics for scans. Args: days: Number of days to include Returns: Summary statistics

Get all events for a specific target.

Get Metasploit version info.

Decorator for graceful error handling of tool operations. Args: tool_name: Name of the tool fallback_value: Value to return i

Health check endpoint.

List the available API security testing modules and what they check.

List all campaigns.

List scan jobs.

Get modules for a specific category. Args: category: Module category (osint, webscanner, apisec, compliance) Returns:

List all scans with pagination. Args: page: Page number (1-indexed) page_size: Items per page Returns: S

List available security standards.

Register callback for link click events.

Register callback for form submission events.

Enumerate DNS records for a domain.

Harvest email addresses.

Run full OSINT reconnaissance.

Analyze HTTP security headers.

Scan for open ports (uses nmap if available).

Query Shodan for host information.

Discover subdomains.

Detect web technologies.

Check target against VirusTotal.

Perform WHOIS lookup.

Parse OpenAPI spec from file. Args: path: Path to OpenAPI JSON/YAML file Returns: Parsed API specification

Fetch and parse an OpenAPI/Swagger spec URL, returning a summary of what was found. Useful for inspecting an API before deciding which tests

Parse OpenAPI spec from string. Args: content: OpenAPI spec content format: "json" or "yaml" Returns:

Audit a single password for strength and policy compliance.

Batch-audit passwords from a file. Exports metrics only (no plaintext).

Generate secure random passwords or passphrases.

Start phishing server for landing pages.

List available phishing templates.

Get prioritized list of findings with reasoning. Returns: Prioritized findings with justification

Render template with variables. Returns: Tuple of (subject, html_body, text_body)

Generate HTML security report.

Generate JSON security report.

Get remediation guidance for a specific finding.

Security-suite compatible run() — target.value is treated as password label.

Execute the scanner against a target.

Security-suite compatible run() interface. Target value = single IP.

Execute the scan against a target. Args: target: Target with target_type 'ip', 'network' (CIDR), or 'domain' Returns:

Scan services for known exploits.

Run a Metasploit scan against target.

Create sample ScanResult for testing.

Create sample ScanResult for testing.

Save a custom email template.

Save a custom landing page template.