cdd-framework
v0.4.0-alpha.5
Published
Cyberattak-Driven Development Framework
Readme
CDD Framework (Node Adapter)
Cyberattack-Driven Development: A high-performance vulnerability scanner powered by Rust.
CDD is a modern security scanning engine designed for speed and reliability. It combines a memory-safe Rust core for intensive network operations with a Node.js CLI for a seamless developer experience.
Quick Start
You don't need to have Rust installed locally to use the framework. The installer automatically fetches the pre-compiled binary for your specific architecture (Windows, macOS, or Linux).
This package is the entry point for the Cyberattack-Driven Development workflow.
It acts as a wrapper around the native ratel-cli engine.
Prerequisites
- Ratel-CLI: Must be installed globally via the official
install.sh.ratel-cliincludes the nativecdd-corelibrary.
Usage
1. Initialize a project
Setup the .ratel scenario and integrity baseline:
npx cdd-framework init- Run Security Audit This command calls the global ratel binary, parses the DSL, executes attacks via cdd-core, and displays a formatted report:
npx cdd-framework run tests/ratel/security.ratel- Pass-through commands Any other command is sent directly to the native engine:
npx cdd-framework check
npx cdd-framework --version
Architecture
The framework is architected for maximum performance and modularity:
cdd-core (Rust): Handles raw HTTP requests and concurrent scanning using tokio and reqwest. It features a strictly typed error system (CddError) to ensure the engine never crashes silently.
cdd-node (Node.js): Orchestrates binary execution and formats raw JSON output into a professional "Hacker Dark Mode" terminal table.
Error Handling
CDD implements a robust diagnostic system. If a scan fails, the engine provides clear, structured feedback:
InvalidUrl: The provided target URL is malformed or unreachable.
NetworkError: Connection failure, DNS issues, or request timeout.
InternalError: Captured internal engine configuration issues.
Contributing
This is an open-source project. Feel free to open issues or submit pull requests to add new security tests to the Rust core!
Author: Fabio Meyer<github.com/jemmyx>
Version: 0.4.0-alpha.5
License: MIT
