Documentation for Syhunt Hybrid and its modules: Syhunt Dynamic (DAST), Syhunt Code and Mobile (SAST/MAST), Syhunt API and Syhunt Forensic.
New to Syhunt? Start with the Welcome Guide, then the Quick Start.
| Guide | Description |
|---|---|
| Welcome Guide | Activate your license, stay informed and find help. |
| Quick Start | What Syhunt does and where to go next. |
| Download | Where to get the installers. |
| Proof-of-Concept Test Plan | A step-by-step evaluation of the key features. |
| FAQ | Common questions. |
| Guide | Description |
|---|---|
| Installation Overview and Windows | Editions, Windows setup, the Sandcat browser extension, network requirements, updating and uninstalling. |
| Linux | Step-by-step setup for Kali, Ubuntu, Debian, Fedora, RHEL-based and other distributions. |
| macOS | Setup on Apple Silicon and Intel Macs, and in Parallels Desktop. |
| Web UI | Enabling the Web UI, users, roles and password policy. |
| Installing Wine | Wine64 setup for the Linux and macOS (Carbon) editions. |
| Migration Notes | What changes when upgrading between versions. |
| Performance Tuning | Dealing with long scans. |
| Guide | Description |
|---|---|
| Dynamic Scanning (DAST) | Black-box scans of running web applications. |
| Authenticated Scanning | Scanning areas behind a login. |
| Source Code Scanning (SAST/MAST) | White-box scans of web and mobile source code. |
| Web API Scanning | Scanning APIs from their specifications. |
| Hunt Methods | Choosing a scan method. |
| Ignore Rules | Suppressing findings. |
| Scheduling Scans | Running scans automatically. |
| Forensic Log Analysis | Investigating attacks from web server logs. |
| Reporting | Customizing and exporting reports. |
| Guide | Description |
|---|---|
| Command Line (CLI) | scanurl, scancode, scancore and more. |
| PowerShell | Start-DynamicScan and Start-CodeScan. |
| Web API | Launching scans and getting results over HTTP. |
| Lua API | Scripting Syhunt in Lua. |
| GitHub | GitHub Actions and GitHub Issues. |
| GitLab | GitLab CI, the security dashboard and GitLab Issues. |
| Bitbucket | Bitbucket Pipelines. |
| Azure DevOps | Azure DevOps and TFS repositories. |
| Jenkins | Jenkins pipelines and agents. |
| Issue Trackers | GitHub, GitLab and Jira trackers. |
| DefectDojo | Sending results to DefectDojo. |
| Faraday | Sending results to Faraday. |
| Document | Description |
|---|---|
| Technical Specifications | Capabilities, system requirements and glossary. |
| Preferences | Every preference you can set from the CLI. |
| Vulnerability Checks | The list of web application checks. |
| Document | Description |
|---|---|
| Reporting Bugs and Getting Support | False positives, debug logs and support tickets. |