whatisgithub

What is lolyz-automation-tool-for-reconnaissance?

persona-non-gratta/lolyz-automation-tool-for-reconnaissance — explained in plain English

Analysis updated 2026-05-18

3ShellAudience · developerComplexity · 2/5LicenseSetup · moderate

In one sentence

LOLYZ is a Bash script that chains nmap, ffuf, and nikto into one command to automate the early recon steps of a web security scan.

Mindmap

mindmap
  root((LOLYZ))
    What it does
      Wraps nmap
      Wraps ffuf
      Wraps nikto
      Silent mode
    Tech stack
      Bash
      nmap
      ffuf
      nikto
    Use cases
      Web recon automation
      Content discovery
      Vulnerability checks
    Audience
      Learners
      Security hobbyists
    Notes
      Learning project
      AI-assisted fixes

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

What do people build with it?

USE CASE 1

Run a single command to perform port scanning, directory discovery, and basic vulnerability checks against a target you have permission to test.

USE CASE 2

Use silent mode to produce cleaner scan logs without banner output for scripting or reporting.

USE CASE 3

Pair the tool with SecLists wordlists to improve ffuf's content discovery results.

USE CASE 4

Learn how nmap, ffuf, and nikto can be chained together as a starting template for your own recon scripts.

What is it built with?

Shellnmapffufnikto

How does it compare?

persona-non-gratta/lolyz-automation-tool-for-reconnaissancehannes/quackmalept/github-action-gh-pages
Stars333
LanguageShellShellShell
Last pushed2024-06-052025-08-14
MaintenanceDormantQuiet
Setup difficultymoderatemoderatemoderate
Complexity2/54/52/5
Audiencedeveloperdeveloperdeveloper

Figures from each repo's GitHub metadata at analysis time.

How do you get it running?

Difficulty · moderate Time to first run · 30min

Requires nmap, ffuf, and nikto pre-installed and on your PATH, ffuf and nikto come from the AUR on Arch Linux.

Use freely for any purpose, including commercial use, as long as you keep the copyright notice.

So what is it?

LOLYZ, also called Lord of the Lollies: Year Zero, is a small Bash script that wraps three well known security scanning tools, nmap, ffuf, and nikto, into a single command. Instead of running each tool separately during the early stage of a web security check, you run one script and it handles port and service scanning, directory and content discovery, and basic web server vulnerability checks in sequence. Before using it, you need nmap, ffuf, and nikto already installed and available on your system's command path, and the README gives install commands for both Arch Linux and Debian or Ubuntu based systems, noting that ffuf and nikto come from the Arch User Repository on Arch. It also recommends pairing the tool with SecLists, a popular open collection of wordlists, to get better results out of ffuf's content discovery. Usage is a single command pointing at a target, with one documented flag, a silent mode that suppresses the tool's banner output for cleaner logs. The author describes this project plainly as a personal learning exercise built right after finishing a beginner Bash scripting course, done to test their own skills rather than as a professional security product, and says they are not pursuing a scripting career from it. The README also discloses that some features, like timestamped logging, and several bug fixes were built with help from Claude, an AI assistant, to make the tool safer and more convenient. The project welcomes contributions and pull requests, and the author lists several areas that could use improvement, including better error handling, more scan profiles, and configuration file support. The project is released under the MIT license.

Copy-paste prompts

Prompt 1
Explain what each of nmap, ffuf, and nikto does and why chaining them is useful for early-stage web recon.
Prompt 2
Help me install nmap, ffuf, and nikto on Debian and clone SecLists to use with this tool.
Prompt 3
Write a Bash function that adds a config file option to a scanning script like this one.
Prompt 4
Add error handling to a Bash script that currently assumes nmap, ffuf, and nikto are always installed.

Frequently asked questions

What is lolyz-automation-tool-for-reconnaissance?

LOLYZ is a Bash script that chains nmap, ffuf, and nikto into one command to automate the early recon steps of a web security scan.

What language is lolyz-automation-tool-for-reconnaissance written in?

Mainly Shell. The stack also includes Shell, nmap, ffuf.

What license does lolyz-automation-tool-for-reconnaissance use?

Use freely for any purpose, including commercial use, as long as you keep the copyright notice.

How hard is lolyz-automation-tool-for-reconnaissance to set up?

Setup difficulty is rated moderate, with roughly 30min to a first successful run.

Who is lolyz-automation-tool-for-reconnaissance for?

Mainly developer.

Open on GitHub → Ask about another repo

This repo across BitVibe Labs

Verify against the repo before relying on details.