CyberForge
A Rust cybersecurity toolkit — four focused offensive-security tools built as a Cargo workspace, with zero external services and clean stdlib-heavy implementations.
CyberForge (repository: BartoszOsiej/CyberForge) contains four
standalone CLI tools written in Rust. Each tool is deliberately focused,
single-purpose, and built to run anywhere Rust compiles — no daemons, no
databases, no cloud dependencies.
Language: Rust (2021 edition) · Workspace: Cargo workspace with 4
members · Release profile: lto = true, opt-level = 3, stripped symbols
The four tools
| Tool | Purpose | Key capabilities |
|---|---|---|
| NetRecon | Concurrent TCP port scanner | CIDR expansion, hostname resolution, banner grabbing, JSON output, worker pool |
| ShadowScan | Web vulnerability scanner | Security header audit, TLS/cert inspection, reflected XSS/SQLi probes, path discovery |
| HashSleuth | Hash identification & cracking | Fingerprinting of 15+ formats, parallel dictionary attack, masked brute force |
| PacketEye | pcap traffic analyzer | Live + offline capture, protocol mix, top talkers, TCP handshake stats |
Why Rust
- Memory safety — no buffer overflows or use-after-free in security tools
- Zero-runtime — single static binaries, no interpreter required
- Speed — release builds with
lto+opt-level 3 - Portability — the same binary runs on any Linux/macOS/Windows host
Build
# Build all four tools (release)
cargo build --release
# Individual tools
cargo build --release -p netrecon
cargo build --release -p shadowscan
cargo build --release -p hashsleuth
cargo build --release -p packeteye
# Binaries land in target/release/
ls target/release/{netrecon,shadowscan,hashsleuth,packeteye}
Dependencies: ureq (HTTP client, ShadowScan), openssl (TLS,
ShadowScan), md-5/sha1/sha2 (hashing, HashSleuth), pcap (capture,
PacketEye), num_cpus (parallelism). Everything else is stdlib.
Legal & ethical use
These tools are intended for authorized security testing only — your own systems, lab environments, or targets you have explicit written permission to test. Unauthorized scanning, probing, or password cracking may violate local laws and the terms of service of the systems involved. The author accepts no responsibility for misuse.
Repository layout
cybersec-tools/
├── Cargo.toml # workspace definition + release profile
├── netrecon/
│ └── src/main.rs # TCP scanner + banner grabber
├── shadowscan/
│ └── src/main.rs # web vulnerability scanner
├── hashsleuth/
│ └── src/main.rs # hash identify/dict/brute
└── packeteye/
└── src/main.rs # pcap analyzer