Crucible — Overview & Benefits

What is Crucible?

Crucible is the unified pentest orchestration platform that replaced three previously separate Flask applications:

Vantage — network reconnaissance manager (Scattershot3 + OSift + Trawler)
Crucible v1 — web and API testing manager (Fracture + Siphon + Auger + AuthProbe)
Spectre — wireless assessment manager (Aether + Aether-B + Aether-Z + Aether-U)

Crucible v2 manages 16+ integrated tools from a single browser-based dashboard, providing real-time console output, centralized findings, cross-tool intelligence aggregation, automated follow-up via action items, and over 50 scope-specific report types — all secured behind session-based authentication with HTTPS.

It runs on port 5100 with self-signed TLS. On first launch, _auth.py generates credentials and prints them to the console.

Why Use Managed Mode?

Every tool Crucible manages can also run standalone from the command line. But running tools through Crucible provides significant operational advantages that compound across an engagement:

Core

Centralized Findings

All tool findings are aggregated into a single deduplicated view. Duplicate detections from different tools are merged automatically by (title, IP, port, scope, hostname). One search, one export, one triage workflow — no more merging spreadsheets from five tools.

Automation

Action Item Pipeline

When Scattershot3 discovers a web server, Crucible automatically generates a Fracture action item for that target. When OSift finds API endpoints, a Siphon action item appears. This cross-tool pipeline chains reconnaissance into exploitation testing without manual copy-paste of targets.

Automation

Auto-Queue Execution

Enable auto-queue and walk away. As each tool completes, Crucible evaluates pending action items, groups targets by recommended tool, and launches follow-up scans — all while respecting scope boundaries and parallelism rules. Fire-and-forget engagement execution.

Safety

Parallelism Enforcement

Crucible prevents resource conflicts with parallelism groups. Exclusive tools (SS3, Fracture, Siphon, Forge, Aether variants) run one at a time. Lightweight tools (Trawler, Auger, AuthProbe) run in parallel. RAM is monitored — launches are blocked above 85% utilization.

Reporting

50+ Report Types

Generate scope-specific PDF or HTML reports from a single interface. External vulnerability reports, OWASP Top 10 assessments, NIST 800-123 compliance matrices, CIS benchmarks, wireless assessments, API reports, and cross-scope executive summaries — all rendered via Playwright/Chromium.

Analysis

Evidence Correlation

Correlate findings across tools by host (all findings for 10.0.0.5), by CVE (all hosts affected by CVE-2024-1234), and by title. Snapshots let you diff findings between assessment phases to track remediation progress.

Operations

Engagement Scheduling & Hours

Schedule engagements to auto-start at a future date/time. Set allowed testing windows (e.g., Mon–Fri 08:00–18:00 US/Central) — tools automatically pause outside hours and resume when the window reopens.

Scale

Worker Delegation

Register remote Crucible instances as workers and delegate tool runs via WebSocket. Real-time streaming of console output, findings, and logs from workers. Auto-reconnection with 30 attempts at 10-second intervals.

Integration

Nessus Integration

Configure Nessus Professional/Expert API credentials once. Auto-queue checks for existing scans and imports results. Upload .nessus XML files manually. Finding extraction with severity mapping into the unified findings view.

Resilience

Checkpoint & Resume

All managed tools support pause/checkpoint/resume. Pause writes a checkpoint.json and exits cleanly. Resume re-launches with the --resume flag, continuing from the last saved state. Survives Crucible restarts — the queue persists to disk.

Security

Unified Authentication

A single _auth.py session with bcrypt password hashing, CSRF protection, and session timeout with warning overlay. One login covers all tool dashboards, console views, and report generation.

Workflow

False Positive Management

Suppress findings with full recovery. Suppressed findings move to a separate list — never permanently deleted. Recover any false positive back to the active findings list at any time. Bulk suppress/recover operations supported.

Authorization & Ethics

⚠️ Authorized Testing Only

Crucible orchestrates tools that actively probe and test live systems including networks, web applications, APIs, wireless networks, databases, cloud infrastructure, and endpoints. Using these tools against systems you do not have explicit authorization to test is illegal under laws including the CFAA (US), CMA (UK), and equivalent legislation worldwide. Always obtain signed Rules of Engagement (RoE) or Statement of Work (SoW) before beginning any assessment. pr0t31n does not condone unauthorized testing.

🛡️ Sensitive Data Handling

Engagements collect vulnerability data, credentials, API keys, certificates, network maps, and other sensitive information. Handle all findings and evidence in compliance with your organization's data protection policies and applicable regulations (GDPR, CCPA, HIPAA). Store engagement data in encrypted, access-controlled locations. Follow your data retention policy for sanitization or destruction upon engagement completion.

Managed Tool Registry

Crucible manages the following tools. Each tool has an adapter class that defines its command-line arguments, environment variables, settings schema, and protocol token family.

Tool ID	Name	Domain	Sudo Required
`ss3`	Scattershot3	Network Recon	Yes
`osift`	OSift	OSINT	Yes
`fracture`	Fracture	Web Application	No
`siphon`	Siphon	API Testing	No
`auger`	Auger	Database	No
`authprobe`	AuthProbe	Auth Fingerprinting	No
`trawler`	Trawler	Traffic Analysis	No
`aether`	Aether	WiFi	Yes
`aether_b`	Aether-B	Bluetooth	Yes
`aether_z`	Aether-Z	Zigbee	Yes
`aether_u`	Aether-U	UWB	Yes
`bastion`	Bastion	Firewall Audit	No
`forge`	Forge	Cloud Security	No
`quill`	Quill	Mobile App	No
`isotope`	Isotope	File Analysis	No
`dredge`	Dredge	Endpoint Security	No
`pain`	pAIn	AI Red Team	No
`nessus`	Nessus	Vulnerability Scan	No

Parallelism Groups

Crucible enforces parallelism rules so that resource-intensive tools never run simultaneously. The queue manager checks these rules before every launch and blocks or defers tools that would conflict.

Group	Tools	Behavior
Exclusive	SS3, Fracture, Siphon, Forge, Aether, Aether-B, Aether-Z, Aether-U	Only one exclusive tool runs at a time. Others queue until the running tool completes.
OSift	OSift	Can run alongside SS3 (they complement each other), but not alongside any other exclusive tool.
Any	Trawler, Auger, AuthProbe, Bastion, Quill, Isotope, Dredge, pAIn, Nessus	Always allowed to run in parallel — these are lightweight or API-based tools.

UI & Themes

Crucible offers 10 curated CSS palettes: Tuxedo, Blueprint, Forge, Bloom, Ember, Coruscant, Neuromancer, Synthwave, Espresso, and Sage. Each palette has both light and dark variants. Toggle between light and dark mode from the palette picker in the navigation bar. Your selection persists across sessions via a browser cookie.

Session timeout is enforced with a warning overlay — when your session nears expiry, Crucible shows a countdown with an option to extend.

Crucible Docs

Overview & Benefits