Documentation

Everything you need to deploy, configure, and operate WAR-EYE.

Example Campaign Config

campaign.yaml
# WAR-EYE Campaign Configuration

version: "1.0"
name: "api-security-audit"

target:
  url: "https://api.example.com"
  auth:
    type: "bearer"
    token_env: "API_TOKEN"

recon:
  enabled: true
  depth: "deep"
  timeout: "5m"
  discover:
    - endpoints
    - auth_schemes
    - rate_limits

fuzz:
  enabled: true
  engine: "libafl"
  corpus: "./corpus/"
  coverage_target: 85
  max_iterations: 100000
  stateful: true

triage:
  enabled: true
  model: "gpt-4"
  severity_threshold: "low"
  deduplicate: true

output:
  format: ["jsonl", "sarif"]
  directory: "./reports/"
  export_pocs: true

Full documentation is available to licensed users.

Request Access