Yakit User Manual
Welcome to the new Yakit user manual. Yakit is an integrated, individual-operator security-capability platform built on the security-fusion philosophy and driven by the Yaklang security domain language. This manual follows a "why → what → how → extend" thread, systematically taking you from concept to practice and from basics to advanced usage of Yakit.
This manual is the refactored new edition, split into chapters and sections for easy lookup and progressive learning. The left sidebar is expanded by default. To consult the legacy version, expand "Legacy: Yakit Manual" at the bottom of the sidebar.
Manual structure
This manual is divided into five chapters:
1. Why Yakit exists: unifying the tool platform
Starting from the evolution of information-security threats, it analyzes the fragmentation dilemma of the traditional security-tool ecosystem, explains the "security fusion" philosophy and technical approach, and introduces Yakit's core advantages as a unified security platform along with a recommended learning path.
2. Yakit's core features and usage
Introduces Yakit's application architecture, installation and configuration, UI overview and core feature navigation, and gets you started hands-on through toolsets such as port scanning, weak-password brute force, directory scanning, asset mapping, encoding/decoding, traffic auditing, reverse connection, Java deserialization, labs, and vulnerability detection.
3. The communication-hijacking core suite: Yakit MITM
Covers the technical principles of the MITM man-in-the-middle proxy, basic usage, advanced hot-reload techniques, and advanced traffic-manipulation configuration and environment simulation.
4. The HTTP replay and fuzzing suite: Web Fuzzer
Covers the Web Fuzzer UI and basic usage, fine-grained configuration, intelligent Fuzztag request construction, data matching and processing rules, global scripting and lifecycle hooks, the Yaml PoC generation workflow, and multi-packet sequencing.
5. The highly extensible Yakit plugin system
Introduces the design philosophy and hybrid-plugin invoker architecture of the Yakit plugin system, the plugin ecosystem, the plugin authoring guide, debugging and practice, and common errors and fixes.
Reading suggestions
- Beginners: start with chapters 1 and 2 to build an overall understanding and get hands-on with the basic tools.
- Advanced users: jump directly to chapters 3 and 4 to master the advanced usage of MITM and Web Fuzzer.
- Developers: chapter 5 systematically covers plugin development, helping you turn experience into reusable tool components.