VisorGraph

VisorGraph is a typed-provenance infrastructure mapper. 14 packages, ~6.7 MB static binary. Native gVisor sandboxing for safe probing of untrusted targets, Go Vuln DB integration, built-in Prometheus and debug endpoint probes.

What it does

• Typed-provenance graph output, every node carries the rule that produced it
• Rule-based exposure classification with confidence scoring
• Fixed-point passive saturation, then active probes gated on budget
• Sandbox-MITM detection, downgrades L7 conclusions when running inside an intercepting environment
• Prometheus and debug endpoint probes built in
• Go Vuln DB integration for CVE matching against discovered services

Why this exists

Recon outputs are often a flat list of findings stripped from their derivation. VisorGraph keeps the derivation: every finding carries the chain of probes that produced it, so you can replay the reasoning and audit it.

Source

github.com/nuclide-research/VisorGraph