Exploitation & Cyber Linked Intelligence Penetration Scanning Engine
🌑 The most advanced open-source security reconnaissance and vulnerability assessment framework ever built. 30+ modules. AI-powered analysis. Full automation. Zero cost.
ECLIPSE is a comprehensive, fully automated, next-generation cybersecurity reconnaissance and vulnerability assessment framework designed to streamline the entire security testing workflow into a single unified platform. Built from the ground up with modern Python 3 architecture, ECLIPSE combines over 30 specialized security modules into one powerful command-line interface, enabling security researchers, penetration testers, bug bounty hunters, and ethical hackers to perform complete end-to-end security assessments with unprecedented speed, accuracy, and efficiency.
Unlike traditional security tools that focus on a single aspect of security testing, ECLIPSE integrates subdomain enumeration, port scanning, technology fingerprinting, SQL injection detection, cross-site scripting identification, directory bruteforcing, DNS analysis, SSL/TLS auditing, CMS detection, WAF identification, email harvesting, JavaScript analysis, cloud infrastructure scanning, mobile application reverse engineering, supply chain analysis, dark web monitoring, network topology mapping, API security testing, social engineering simulation, real-time dashboard visualization, bug bounty platform integration, AI-powered vulnerability analysis, exploit generation, browser automation, wireless network scanning, blockchain smart contract auditing, and a complete red team arsenal — all within a single cohesive framework.
Whether you are conducting an authorized penetration test, performing bug bounty research on in-scope targets, hardening your own infrastructure, or learning about offensive security concepts in a controlled environment, ECLIPSE provides the tools you need with the automation you deserve.
- 🔍 30+ Security Modules — Complete coverage of every attack surface
- 🧠 AI-Powered Analysis — Machine learning vulnerability scoring
- ⚡ Fully Automated — One command = complete scan
- 🌩️ Cloud Security Scanner — AWS, Azure, GCP support
- 📱 Mobile App Analyzer — APK/IPA reverse engineering
- 🎯 Bug Bounty Integration — HackerOne & Bugcrowd support
- 📊 6 Report Formats — HTML, PDF, JSON, CSV, Markdown, DOCX
- 🫥 Stealth Mode — Traffic mimicry, proxy rotation, Tor support
- 📡 Continuous Monitoring — Scheduled scans & change detection
- 🌐 Real-Time Dashboard — Web-based live scan monitoring
- 💬 AI Chatbot Assistant — Natural language scanning queries
- 🔌 Plugin System — Extensible architecture for custom modules
- 💀 Red Team Arsenal — C2 server, payload generator, privesc tools
- 🔗 Blockchain Auditor — Smart contract vulnerability analysis
- 📶 Wireless Scanner — WiFi discovery & handshake capture
# Clone the repository
git clone https://github.com/donrich99/eclipse.git
cd eclipse
# Install dependencies
pip install -r requirements.txt
# Run your first scan
eclipse --target example.com --full# Full automated scan
eclipse --target example.com --full
# Specific module
eclipse --target example.com --sqli
# Generate HTML report
eclipse --target example.com --full --report html
# Stealth mode with Tor
eclipse --target example.com --full --stealth --tor
# Port scan with high threads
eclipse --target 192.168.1.1 --ports --threads 100
# SSL analysis only
eclipse --target google.com --ssl
# DNS enumeration
eclipse --target example.com --dns
# Security headers audit
eclipse --target example.com --headers| Module | Command | Description |
|---|---|---|
| Subdomain Enum | --subdomains |
Discover subdomains via brute-force |
| Port Scanner | --ports |
TCP port scanning with service detection |
| Tech Detector | --tech |
Identify web technologies and frameworks |
| SQLi Scanner | --sqli |
Detect SQL injection vulnerabilities |
| XSS Scanner | --xss |
Detect Cross-Site Scripting vulnerabilities |
| Dir Bruteforce | --dirs |
Discover hidden directories and files |
| DNS Enum | --dns |
Enumerate DNS records |
| WHOIS Lookup | --whois |
Retrieve domain registration info |
| SSL Analyzer | --ssl |
Analyze SSL/TLS certificates and configuration |
| Headers Audit | --headers |
Audit HTTP security headers |
| CMS Detector | --cms |
Detect Content Management Systems |
| WAF Detector | --waf |
Detect Web Application Firewalls |
| Email Harvester | --emails |
Extract email addresses from target |
| JS Analyzer | --js |
Analyze JavaScript for secrets and endpoints |
| Module | Description |
|---|---|
| AI Analyzer | AI-powered vulnerability scoring |
| Cloud Scanner | AWS/Azure/GCP misconfiguration detection |
| Mobile Analyzer | APK/IPA security analysis |
| Supply Chain | Dependency vulnerability scanning |
| Dark Web Monitor | Data breach monitoring |
| Network Mapper | Network topology discovery |
| Module | Description |
|---|---|
| API Tester | REST/GraphQL API security testing |
| Social Engineering | Authorized phishing simulation |
| Real-Time Dashboard | Web-based live monitoring |
| Bug Bounty | HackerOne/Bugcrowd integration |
| AI Chatbot | Natural language security queries |
| Exploit Framework | Payload and PoC generation |
| Browser Automation | Headless browser testing |
| Wireless Scanner | WiFi/BT network discovery |
| Blockchain Analyzer | Smart contract auditing |
| Red Team Arsenal | Complete offensive toolkit |
ECLIPSE uses a weighted scoring system to classify vulnerability severity:
| Severity | Weight | Description |
|---|---|---|
| CRITICAL | 10 | Remote code execution, SQL injection, etc. |
| HIGH | 7 | XSS, authentication bypass, data exposure |
| MEDIUM | 4 | Missing headers, information disclosure |
| LOW | 2 | Minor configuration issues |
| INFO | 1 | Informational findings |
ECLIPSE can be configured via command-line arguments or a YAML configuration file:
# Create default config
eclipse --init-config
# Use custom config
eclipse --target example.com --config custom.yamlGot questions? Found a bug? Want to contribute? Or just want to say hi?
Feel free to reach out through my social media:
| Platform | Link |
|---|---|
| @dvc |
💬 Don't hesitate to message me if you have questions about ECLIPSE, suggestions for new features, or if you need help getting started. I'm always happy to hear from the community!
This tool is designed for authorized security testing only. Users must obtain explicit written permission before testing any system they do not own or have explicit authorization to test. Unauthorized access to computer systems is illegal. The developers assume no liability and are not responsible for any misuse or damage caused by this program.
By using ECLIPSE, you agree to:
- Only use it on systems you have permission to test
- Comply with all applicable local, state, and federal laws
- Take full responsibility for your actions
- Not use this tool for any illegal or unethical purposes
ECLIPSE is and always will be 100% FREE and OPEN SOURCE.
I am NOT asking for payment for this tool — it is my gift to the cybersecurity community. However, if you find ECLIPSE valuable and would like to support its continued development, maintenance, and future feature expansion, any voluntary contribution would be greatly appreciated.
Your donations help cover development time, server costs for testing, new module research, and keeping this project alive and growing.
| Platform | Details |
|---|---|
| GCash | 09945160282 |
| PayPal | poorvallejos@gmail.com |
💡 Every contribution, no matter how small, keeps this project running. Thank you for supporting open-source security tooling!
This project is licensed under the MIT License — see the LICENSE file for details.
Copyright (c) 2026 @dvc — All Rights Reserved.
- Created by @dvc
- Inspired by the open-source security community
- Built with ❤️ for ethical hackers worldwide
ECLIPSE — When darkness falls, vulnerabilities shine. 🌑
