Workspace
OP
Operator
operator@example.com
Tier-1 Officer
Member
SUBSCRIPTION & QUOTA
Professional Tier
0 / 0 runs used this month
-- left
💳
Plans & Pricing
Compare Basic, Pro & Max — change plan anytime
View →
📱
Telegram Bot Integration
Not linked
Configure →
🔑
Change Password
Update account security credentials
🛡️
Two-Factor Authentication
Authenticator 2FA Active
📜
Terms & Policies
ToS, AUP & Privacy Notice
Overview
Your offensive operations at a glance.
⏳
Access gate
Engagements
0
Active Runs
0
Live right now
Findings
0
Ready for Retest
0
Awaiting remediation check
Findings by severity
0 total
Engagements by stage
0 total
Recent Engagements
Recent Activity
Live Assessment
Engagements running right now — watch progress in real time.
Active Engagement
No active engagement
⏱
00:00
Step 1
Bootstrap
Step 2
Reconnaissance
Step 3
Exploitation
Step 4
Chaining
Step 5
Verification
Step 6
Report
⚡ Aegis Live Offensive Stream
[READY]
[*] Aegis Offensive Engine initialized.
[*] Scope firewall active · Ready to dispatch target.
📄 Report Delivery
Engagement complete — deliverables ready.
💾 You have a saved engagement draft.
Guided Setup
Name the engagement, scope the target, confirm permission, configure, pre-flight, then run.
- 1Details
- 2Scope
- 3Permission
- 4Configuration
- 5Pre-flight
- 6Run
Engagement Details
Name the customer, asset owner, or bug bounty program this engagement is for.
Independent
Switch workspace from the selector in the top-right header.
0 / 32,000
Target Scope
Enter one target per line.
Supported formats & matching
example.com — the domain and its subdomains ·
api.example.com — a single subdomain ·
*.example.com — all subdomains ·
https://example.com/app — only that URL path ·
1.2.3.4 / 1.2.3.0/24 — IP or CIDR range.
Exclusions below override inclusions.
# starts a comment.
Exclusions override inclusions. Exclude a whole host (
legacy.example.com) or just a path (https://example.com/admin fences only that path). One per line.Scope review
Included targets
Excluded
Permission & Authorization
Provide evidence that you are authorized to test the listed targets.
This selection records your stated permission. Confirm that the listed targets and intended testing methods are permitted.
Enter a document link, approval or ticket identifier.
Enter a reference to your invitation or approved program access.
Accepted: PDF, PNG, JPG, DOC/DOCX up to 12 MB. Recorded as Evidence Provided — Aegis does not verify it; you are responsible for ensuring the authorization is valid.
You are responsible for ensuring this authorization is valid.
⚠ Requires Reconfirmation — the configuration changed. Re-confirm testing permission for the final configuration.
Focus Attack Matrix
A
Injections & RCE
SQLi, XSS, SSTI, LFI, XXE, CMDi
B
Access & Auth
BOLA, IDOR, BAC, 2FA, JWT, Reg
C
Cloud & SSRF
IMDSv1/v2, S3, Firebase, IAM
D
Perimeter & DNS
Takeover, VHost, DMARC/Spoof
E
Fintech & Telecom
Payment, MoMo, Race, USSD/SMS
F
Database & CVEs
Exposed DB, N-Day Exploit-DB
0 / 8,000
Execution Preset
Full Assessment
Full recon → exploitation → proof. All matrices active.
Exploit Only
Assume-breach — skip recon, weaponise confirmed findings.
Recon Only
Deep surface map + evidence — no exploitation or state changes.
Authentication & Test Accounts
Provide credentials for accounts on the system being tested, not your Aegis account.
Test Account A
Test Account B
Add a separate user account to test whether one user can access another user's data or actions.
Checks Account A against an in-scope target — it does not launch an assessment or confirm cross-account logic.
Program-mandated headers added to every request — one per line or comma-separated, format
Name: value (e.g. X-Bug-Bounty: your-handle). Keep sign-in credentials in the account fields above, not here.
Network Connection
Aegis-managed Redirector
Choose how Aegis connects to the target.
Aegis-managed Redirector
Default · no setup
Private VPN
WireGuard tunnel
Custom Proxy
SOCKS5
Format:
scheme://[user:pass@]host:port — scheme socks5, socks5h, http or https. Any credentials are encrypted at rest and never shown again. Aegis routes in-scope traffic through this proxy; the exit IP is the proxy's.•••••• proxy credentials saved — leave the URL as-is to keep them, or re-enter the full URL with credentials to change.
Stored encrypted · routing hooks are stripped · only your tunnel keys + endpoint are kept.
•••••• VPN config saved — leave blank to keep, paste/upload to change.
Checks reachability to an in-scope target through the selected connection — it does not launch an assessment or confirm sign-in.
This connection applies to all in-scope targets for this engagement. Out-of-scope traffic is always blocked by the scope firewall, whichever route you choose.
🌐 Network Restrictions (optional — leave blank for unrestricted)
The client's limits on the Network Connection above — not a second route choice.
⚡ Pre-flight:
Full Assessment · exploitation on · All Vectors (A–F)
🧬 Binary / Mobile Application
Reverse-engineer an APK / IPA / binary, then optionally run it live and attack the backends it reveals.
Engagement details
Name the customer, asset owner, or bug bounty program this engagement is for.
Independent
1 · Binary / app
No file selected
One app per engagement. Store-page links can't be fetched anonymously — download & upload those.
2 · Depth
🧬 Run it live
⚡ Attack discovered backends
Run it live executes the app in a sandbox to capture decrypted traffic, keys & storage.
Attack discovered backends actively probes the APIs Aegis finds inside — it uses the hosts
the app reveals, so no target is needed here.
3 · Credentials — optional
Key = a value the app needs to decrypt/sign itself (static reversing).
Login = Aegis signs into the running app for the authenticated deep-dive; at the OTP
screen it pauses and asks you for the code here and on Telegram. Only this account is used.
🔐 Permission & Authorization