One CLI for
offensive security.
crossfyre is the command-line toolchain for offensive security
engineers. Log in, bring any host online as a distributed recon node, and
install the scan engines you need: content discovery, subdomain enumeration,
network scanning, all from one binary. Authenticated by default: the CLI
does nothing until you crossfyre login.
curl -fsSL https://get-staging.crossfyre.io/install.sh | sudo bash Reviews before it runs. Read the script first at get-staging.crossfyre.io/install.sh.
crossfyre login sudo crossfyre node init What the CLI does
Logs you in first
Authenticated by default: every command requires crossfyre login. Sign in with an API key, your credentials, or the browser; the session is tied to your account.
Runs distributed nodes
Turn any host into a recon node with one command, provisioned under your account, wired into the control plane, with its own local database, ready to take work.
Installs scan engines
A built-in package manager installs, updates, and removes the mach / voyage / pulse engines, every download checksum-verified against a signed manifest.
Scan engines
Engines are the scanners your nodes run. The CLI installs and supervises them;
add or drop one any time with crossfyre extension install. Each is a
standalone, checksum-verified daemon.
mach
High-throughput HTTP fuzzer and content-discovery engine. Brute-forces paths, parameters, and virtual hosts to surface hidden attack surface.
voyage
Subdomain enumeration engine. Maps an organization’s external footprint by resolving and expanding its DNS namespace at scale.
pulse
Network host and port-scanning engine. Sweeps ranges for live hosts and open services to chart the reachable perimeter.
Downloads
Prebuilt Linux (x86-64) binaries, each checksum-verified against the signed release manifest. Prerequisite: Docker. The scan engines persist state to a local database that the CLI runs as a Docker container, so install Docker before you bring a node online.
Command reference
crossfyre login Authenticate to your account (API key, username/password, or the browser). Required before anything else works.
crossfyre node init Bring this host online as a node: prompts for the node API key (from the dashboard), installs the scan engines, sets up the database, and starts the service.
crossfyre extension install mach Install a scan engine (mach / voyage / pulse / all): downloads, verifies its checksum against the signed manifest, and starts its daemon.
crossfyre status See what is running. Scope it with node status or db status.
crossfyre update all Update the CLI itself and every installed engine from the release manifest, by checksum.
crossfyre doctor Diagnose the environment: Docker, the database container, release-CDN reachability, PATH.
Get your toolchain online.
Install the CLI, crossfyre login, and bring your first recon node up in under a minute.