Configuration Overview

vulcn init

# vulcn.config.yml
version: "1"

plugins:
  # Payload loading
  - name: "@vulcn/plugin-payloads"
    config:
      builtin: true
      include:
        - xss-basic
        - sqli-basic
      payloadbox:
        - xss
      files:
        - ./custom-payloads.yml

  # XSS detection (execution-based)
  - name: "@vulcn/plugin-detect-xss"
    config:
      detectDialogs: true
      detectConsole: true
      consoleMarker: "VULCN_XSS:"
      severity: high

  # Reflection detection (pattern-based)
  - name: "@vulcn/plugin-detect-reflection"
    config:
      detectBody: true
      detectScript: true
      detectAttribute: true
      bodySeverity: low
      scriptSeverity: medium

settings:
  browser: chromium
  headless: true
  timeout: 30000

version: "1" # Config version (required)

plugins: # Array of plugins
  - name: string # Plugin package name
    config: object # Plugin-specific configuration
    enabled: boolean # Enable/disable (default: true)

settings: # Global settings
  browser: string # chromium | firefox | webkit
  headless: boolean # Run headless
  timeout: number # Timeout in milliseconds