The terminal edition of Darknode — a single command that drives a full security toolkit and hosts Nexus, the AI coding agent. Recon, exploitation helpers, practice labs, governance, and an autonomous AI layer, all from your shell.
You (a command)
|
v
sentinel.js (dispatch + first-run setup)
|
+--> nexus ------> Nexus engine (lib/nexus) ---> Ollama (local) | Claude / API (cloud)
| plan -> act -> observe, cost meter, /undo
|
+--> toolkit ----> external tools: nmap · sqlmap · nuclei · ffuf · httpx ...
|
+--> governance -> identity · usage ledger · compliance bundle
|
+--> lab --------> docker practice targets (spin up / tear down)
v
Results in your terminal
Most subcommands run through the toolkit or governance layers; nexus (aliases
code, ai) hands the turn to the AI engine, which edits files and runs commands
against your workspace with a live token/cost readout.
darknode-cli/
├── sentinel.js # entry point + command dispatch
├── lib/
│ ├── cli/ # command implementations & shared CLI helpers
│ ├── nexus/ # the Nexus AI-coder engine (also its own repo: Darknode-Official/nexus)
│ ├── governance/ # identity, usage ledger, compliance/policy
│ └── toolkit/ # external-tool drivers (recon / web / passwords / ...)
├── scripts/ # build & release helpers
├── test/ # test suite (npm test)
├── docs/ # command reference & guides
├── package.json
└── README.md
# from source (Node 18+)
git clone https://github.com/Darknode-Official/darknode-cli
cd darknode-cli && npm install && node sentinel.js
# or grab a standalone binary from Releases and put it on PATH
darknode nexus --tui # the AI coding agent
darknode nexus --engine ollama # local, private models
darknode <tool> ... # drive the security toolkit
npm test
Active. The Nexus engine lives in lib/nexus and is mirrored to its own repo
(Darknode-Official/nexus); the CLI is the
interactive host for it plus the toolkit and governance layers.
The CLI can run external tools and, via Nexus, edit files and run commands. Use it
only against systems you're authorized to test, and prefer the local ollama engine
for sensitive code. Credentials are never stored in source.
See LICENSE.