ki9mu/ARL-plus-docker

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1005 stars · 162 forks observed · 2026-09-03

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Docker-based fork of ARL (Asset Reconnaissance Lighthouse) v2.6.2 that performs automated asset discovery and vulnerability scanning for domains, including subdomain enumeration, port scanning, file-leak detection, and 245 bundled POCs via nuclei. It adds a centralized domain-sharing database, improved task stability for long-running scans, and WAF/NIDS evasion tweaks.

Use cases

• enumerate subdomains and assets for a target domain
• run automated recon for bug bounty programs
• scan domains for known vulnerabilities with nuclei POCs
• detect file leaks and exposed sensitive files on web assets
• share scanned domain data across a team via a central database
• run long-running reconnaissance tasks without jobs dying

When to choose

• you need a self-hosted, Docker-deployable asset reconnaissance platform
• you want an ARL fork with extra POCs and improved scan stability
• you do bug bounty or authorized pentesting and need automated domain recon

When to avoid

• you lack authorization to scan the target domains - unauthorized use is illegal
• you need a lightweight scanner without Docker or heavy server requirements (4C8G+ recommended)
• you want a maintained upstream project rather than a community fork with no license file

Facets

application · maturity active

security vulnerability-scanning web-scraping self-hosted developer-tools security penetration-testing osint developer-tools self-hosted asset-reconnaissance bug-bounty recon attack-surface-mapping nuclei subdomain-enumeration arl-fork pentest docker linux web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ki9mu/ARL-plus-docker")