Documentation Getting Started

After download, extract and run the setup wizard or install command — environment self-check, desktop shortcut and quick-start guide are automated. Below is the detailed guide and FAQ.

Download Center →

1. System Requirements

Item	Requirement / Note
OS	Windows 10/11 or Windows Server 2016+ (x64)
Python	Local edition: local Python 3.8+; Beta: bundled runtime, no install, offline-ready
Network	Target must be reachable; reports & knowledge base are local/offline
Permission	Administrator rights needed for install and some features (e.g. hardening)

2. One-Click Install / Setup Wizard

Choose one of three ways:

Run 「启动向导.bat」 (Recommended): environment self-check, Python detection/install hint, package integrity check, dependency install, desktop shortcut, and opens the quick-start guide.
Run 「一键安装.cmd」: Beta edition guides you to enter organization, contact, target domains and confirm authorization commitments, writing an Authorization Confirmation Record; Local edition just needs one confirmation.
Run 「一键启动.cmd」: opens the command-line menu directly in an installed environment.

3. First Use

Extract the package to any directory (avoid Chinese characters and spaces in the path).
Run the setup wizard and wait for environment check and installation.
Open the program via the desktop shortcut to reach the command-line menu.
On first run, the Beta edition asks you to complete authorization confirmation (organization + target domain + commitment).
Choose a scan menu, enter the target (your own/authorized domain only), and start scanning.
When complete, the HTML report is auto-generated; open it in a browser and print to PDF.

4. Menu & Features

Feature	Description
Deep Recon	External info gathering (ICP/license, SSL, DNS, subdomains, ports, fingerprint, sensitive info)
Vulnerability Validation	Verify discovered risks within authorized scope (Beta)
Fix Engine	Generate concrete remediation and hardening plans per risk (after authorization)
Knowledge Base	19 vulnerability classes × MLPS 2.0 Level 3 controls × CWE × ATT&CK × industry compliance
Report Generation	Auto-generates HTML / Word (or Markdown) reports
Authorization Record	Auto-generates and archives the Authorization Confirmation Record for evidence

5. Reading Reports

Report structure: Asset overview → Risk summary (severity + count) → Risk details (name / description / location / severity / validation status / fix) → Knowledge base → Authorization record & compliance note.

Risk levels: high / medium / low / info. Prioritize high risks; each fix suggestion includes a concrete hardening plan that can be applied within authorized scope.

6. FAQ

Question	Answer
Do I need internet?	The target must be reachable; the model and knowledge base are local/offline (Beta bundles a runtime).
Python errors?	Local edition needs Python 3.8+; if missing, run the setup wizard to install it. Beta needs no local Python.
Target rejected?	The program validates authorization; confirm the target is your own asset or authorized, otherwise it degrades to principle explanations.
Report output?	HTML report auto-saved in the output directory; print to PDF. Some features support Word.
Data safety?	Detection and reports run locally — data never leaves your computer. Registration data is stored for records only.