Ready to see Bugb in action?
██████╗███████╗██████╗ ████████╗ ██╗ ██╗ ██████╗ ███████╗███╗ ██╗ ██╔════╝██╔════╝██╔══██╗╚══██╔══╝ ╚██╗██╔╝ ██╔════╝ ██╔════╝████╗ ██║ ██║ █████╗ ██████╔╝ ██║ █████╗ ╚███╔╝█████╗██║ ███╗█████╗ ██╔██╗ ██║ ██║ ██╔══╝ ██╔══██╗ ██║ ╚════╝ ██╔██╗╚════╝██║ ██║██╔══╝ ██║╚██╗██║ ╚██████╗███████╗██║ ██║ ██║ ██╔╝ ██╗ ╚██████╔╝███████╗██║ ╚████║ ╚═════╝╚══════╝╚═╝ ╚═╝ ╚═╝ ╚═╝ ╚═╝ ╚═════╝ ╚══════╝╚═╝ ╚═══╝
Polyglot Security Scanner • Open Source • Built with Rust
CERT-X-GEN is a polyglot execution engine: templates in 12 languages, parallel runs, three-tier sandboxing, and AI-powered template generation.
Breaking
Most exploit-based vulnerability scanners accept YAML templates as input, but why limit ourselves to YAML when multi-step exploitation logic is often easier (and more efficient) to implement in real programming languages? That's why we created the Cert-X-Gen CLI.
Cert-X-Gen is a simple CLI tool that lets you write templates in 12 languages: YAML, Python, Java, Go, PHP, Shell, JavaScript, Ruby, Perl, C, C++, and Rust. This gives you more flexible ways to add your favorite templates, and you can also use the CXG CLI's built-in AI capabilities to generate templates on the go.
Open to the community. Happy hacking!
Solution
Introducing CERT-X-GEN — the first polyglot vulnerability scanner that executes detection logic as real code across 12 languages. Instead of being locked into rule syntax, security teams can write checks with the full expressiveness of Python, Go, Rust, JavaScript, C/C++, Java, and more.
Security detection, re-engineered.
Write templates in 12 languages
8 commands. Parallel execution. Real-time findings with severity classification.
Install the CLI, pull the latest templates, then run your first scan. No config required to start.
Choose your install method
brew tap bugb-technologies/cxg && brew install cxgcurl -fsSL https://raw.githubusercontent.com/Bugb-Technologies/cert-x-gen/main/install.sh | bashcargo install --git https://github.com/Bugb-Technologies/cert-x-gen.gitThen run your first scan
cxg template update && cxg scan --scope example.comTemplates download automatically on first run. Use --scope with a host, file, or CIDR.