ravage 0.0.1

Autonomous web security research agent for controlled authorized targets

Ravage

Ravage is an autonomous web security research agent for controlled, authorized targets.

This package provides the ravage CLI and runtime modules. It does not install external scanners such as nmap, sqlmap, katana, nuclei, or ffuf; use ravage tools check and ravage tools install to configure those tools on the host or in the Docker tool image.

Ravage is localhost-first. Remote targets require --allow-remote-target and an explicit scope.in_scope entry. The runtime records a firewall plan only; it does not automatically install host firewall rules. Firewall plan destinations are IP/CIDR-only.

Ravage is source-available under the Ravage Restricted Research License. Use it only for local research, defensive education, controlled benchmarks, and systems you own or have explicit written authorization to test.