> ## Documentation Index
> Fetch the complete documentation index at: https://docs.d0pam1ne.blackhatethicalhacking.com/llms.txt
> Use this file to discover all available pages before exploring further.

# D0pam1ne Overview

> The brain's motivation neurotransmitter: one workspace that runs the whole engagement, recon, attacks, OSINT and reporting, with adaptive evasion and a local AI.

D0pam1ne is a self-hosted offensive-security workspace that runs the entire engagement in one place: reconnaissance, manual and automated attacks, OSINT, vulnerability intelligence and client-ready reporting. It pairs the open-source **D0pam1ne engine** (a curated recon and OSINT toolchain driven from the CLI) with **D0pam1ne Pro**, the multi-user web application your team works in, and a **local AI** that never leaves your machine.

![D0pam1ne Command Center](https://mintcdn.com/black-hat-ethical-hacking/RPEWzJ10O7hxCV8s/images/dashboard/command-center.webp?fit=max\&auto=format\&n=RPEWzJ10O7hxCV8s\&q=85\&s=48abef9ff12c179c6c88443acffa0596)

The Command Center: every client and project in one view

Built by offensive-security practitioners for real engagements, D0pam1ne fuses a fast, modular engine with adaptive evasion and AI-assisted triage, so a tester can take a target from first scope to a signed report without stitching twenty tools together by hand.

## Key components

> **The engine**
>
> The open-source core. A single registry drives the recon and OSINT toolchain, phase by phase, from subdomains and ports to live web, crawling, content discovery, parameters and secrets. Driven by the `d0pam1ne` CLI, or by Pro.

> **D0pam1ne Pro**
>
> The self-hosted web app: the War Room where recon, Manual and Automated Attacks, OSINT, Project Data, triage and reporting live. Multi-user, role-based, 2FA, with everything on infrastructure you control.

> **Local AI**
>
> An on-device model run by Ollama. Triage, report drafting and the Ask AI assistant run locally: no cloud, no account, no telemetry. Your project data never leaves the machine.

## The pipeline

Every engagement moves through the same pipeline. Each stage feeds the next, and everything lands in one project.

**1. Scope**

Define the client and what is in scope. Recon and attacks act only inside it, and anything out of scope is logged, never probed. See [Client and scope](/concepts/scope.md).

**2. Recon**

The engine maps the live attack surface: subdomains, DNS, ports, services, live web, URLs, content, parameters and secrets, with [profiles](/recon/overview.md) for speed or stealth and an adaptive [Evasive Mode](/evasion/overview.md).

**3. OSINT**

Map public exposure before you touch the target: ASNs, people and emails, exposed assets, dorks, email-security posture, breach and infostealer data. See [OSINT](/osint/overview.md).

**4. Project Data**

Everything recon and OSINT find lands in [Project Data](/data/hosts-and-services.md): hosts and services, the [attack-surface graph](/data/attack-surface.md), URLs, technologies, secrets and the [traffic log](/data/traffic.md).

**5. Attack**

[Manual](/attacks/manual-attacks.md) and [Automated](/attacks/automated-attacks.md) attacks take recon's results as their targets and run the right tools per category, filing findings as they go.

**6. Needs Review**

Findings flow into [Issues](/data/issues.md), where AI triage suggests a verdict and you confirm, edit or reject. Only verified issues reach the client.

**7. Report**

Turn verified findings into a branded [PDF](/reporting/pdf-report.md), [interactive HTML](/reporting/interactive-report.md), Markdown, JSON or Word, then [retest](/reporting/retest.md) and show what was fixed.

## What sets it apart

> **[Adaptive Evasive Mode](/evasion/overview.md)**
>
> Not a fixed delay. D0pam1ne paces requests against how the target actually responds, backing off on rate-limiting and blocks, and can route supported tools through Tor with exit-IP rotation so no single address draws attention.

> **[Recon that feeds attacks](/attacks/automated-attacks.md)**
>
> Attacks are not a separate scan. Each category reads the recon signal that justifies it and builds its in-scope target lists automatically, so the right tools run against the right hosts.

> **[Private by design](/ai/local-ai.md)**
>
> The AI runs on your machine via Ollama. No cloud model, no account, no telemetry, and D0pam1ne refuses any AI endpoint that is not local.

> **[Client-ready reporting](/reporting/report-builder.md)**
>
> One branded house design across PDF and interactive HTML, with a full per-finding anatomy (risk, impact, attacker view, evidence, remediation) and a matching retest report.

## Editions

> **Standard**
>
> The licensed build: the full recon, attack, OSINT, triage and reporting workflow for your team.

> **Founder Edition**
>
> Black Hat Ethical Hacking's in-house build, which unlocks extras such as Word (.docx) report export. Founder-only features are marked throughout these docs.

## Where to go next

| You want to... | Go to |
| - | - |
| Install on Kali or macOS | [Installation](/getting-started/installation.md) |
| Sign in and set up your team | [First login](/getting-started/first-login.md) |
| Run your first recon | [Recon overview](/recon/overview.md) |
| Stay quiet and avoid blocks | [Evasive Mode](/evasion/overview.md) |
| Attack what recon found | [Automated Attacks](/attacks/automated-attacks.md) |
| Produce a client report | [Report Builder](/reporting/report-builder.md) |

> [!NOTE]
>
> D0pam1ne runs entirely on infrastructure you control. Keep the port firewalled to trusted addresses, and require login and 2FA on every network interface. See the [security notes](/getting-started/installation.md#security) before exposing it.

## Who builds D0pam1ne

D0pam1ne is coded by **Chris "SaintDruG" Abou-Chabké**, Founder and Chief Hacking Officer at **Black Hat Ethical Hacking**.

> **[Black Hat Ethical Hacking](https://www.blackhatethicalhacking.com)**
>
> Offensive security solutions, vulnerability assessments and digital forensics. Visit blackhatethicalhacking.com, or [contact the team](https://www.blackhatethicalhacking.com/contact_us).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.