Announce the release of Dursgo v1.1.0, a major leap forward that integrates the power of Large Language Models (LLMs) directly into your security scanning workflow.
https://github.com/roomkangali/dursgo/releases/tag/1.1.0
This release focuses on one key feature: AI-Powered Vulnerability Analysis, designed to transform how you understand and remediate vulnerabilities.
✨ What's New
🧠 AI-Powered Vulnerability Analysis
Dursgo can now go beyond standard detection by providing deep, AI-generated insights for each vulnerability found.
- Root Cause Analysis: Get clear and concise explanations of why a vulnerability exists. - Contextual Recommendations: Receive tailored remediation advice specific to the finding. - Actionable Code Examples: Get practical code examples to help developers accelerate the fixing process. - Multi-Provider Support: Seamlessly integrates with leading LLM providers. Current support includes: — Google Gemini — Groq (via its OpenAI-compatible API) — Support for other providers like OpenAI will be added in the future.
🚀 How to Use
To activate this new feature, simply add the ` — enable-ai` flag to your scan command. Ensure you are also saving the output to a JSON file to see the results.
Example Command: Run an SQLi scan and get AI-powered analysis for any findings
./dursgo -u http://testphp.vulnweb.com/ -c 10 -r 3 -s sqli - enable-ai -output-json report.json
📝 Configuration
The AI feature is configured via the new `ai` section in your `config.yaml` file.
# AI (LLM) Integration Settings
ai:
# Enable/disable the feature. Can be overridden by the - enable-ai flag.
enabled: true
# The provider to use. Supported: "gemini", "groq"
provider: "groq"
# Your API key for the selected provider.
api_key: "gsk_…"
# The specific model to use.
model: "meta-llama/llama-4-scout-17b-16e-instruct"
🛠️ Demo Video
https://www.youtube.com/watch?v=kpJS-C-ocLA https://www.youtube.com/watch?v=n1YL1Kxq3Rc
Download DursGo