Command Reference

This document lists all available Cyphon commands, organized by category.

Quick Usage

Type a command in this format:

commandName("parameter")

Example:

whois("google.com")

Commands by Category

🌐 DNS

Command	Description	Syntax	Example
`txt`	Retrieves TXT records for a domain	`txt(domain)`	`txt("example.com")`
`passiveDns`	Returns passive DNS data	`passiveDns(domain)`	`passiveDns("example.com")`
`records`	Retrieves all DNS records	`records(domain)`	`records("example.com")`
`aHost`	Retrieves the A record	`aHost(domain)`	`aHost("example.com")`

🔍 Domain Intelligence

Command	Description	Syntax	Example
`whois`	Retrieves WHOIS information	`whois(domain)`	`whois("google.com")`

🕸️ Web Analysis

Command	Description	Syntax	Example
`technologies`	Gathers technology stack used	`technologies(domain)`	`technologies("example.com")`
`pageIntel`	Gathers webpage intelligence	`pageIntel(url)`	`pageIntel("https://example.com")`
`screenshot`	Takes a screenshot of URL	`screenshot(url)`	`screenshot("https://example.com")`
`crawl`	Crawls URL and retrieves data	`crawl(url)`	`crawl("https://example.com")`
`header`	Fetches HTTP headers	`header(url)`	`header("https://example.com")`
`metrics`	Gathers performance metrics	`metrics(url)`	`metrics("https://example.com")`
`redirect`	Checks for URL redirects	`redirect(url)`	`redirect("https://example.com")`

🔎 OSINT (Open Source Intelligence)

Command	Description	Syntax	Example
`username`	Fetches info about a username	`username(username)`	`username("johndoe")`
`Email`	Gathers email address intel	`Email(email)`	`Email("[email protected]")`
`socialMedia`	Retrieves social media data	`socialMedia(username)`	`socialMedia("johndoe")`

🗺️ Reconnaissance

Command	Description	Syntax	Example
`findSubdomain`	Searches for subdomains	`findSubdomain(domain)`	`findSubdomain("example.com")`

🛡️ Security

Command	Description	Syntax	Example
`blacklist`	Checks if domain is blacklisted	`blacklist(domain)`	`blacklist("suspicious.com")`
`chain`	Analyzes certificate chain	`chain(domain)`	`chain("example.com")`
`domainSpoof`	Checks DMARC+ Compliance	`domainSpoof(domain)`	`domainSpoof("example.com")`

🌍 Network

Command	Description	Syntax	Example
`host`	Retrieves IP address info	`host(ip)`	`host("8.8.8.8")`
`port`	Checks open ports	`port(ip)`	`port("192.168.1.1")`
`ipInfo`	Gathers IP information	`ipInfo(ip)`	`ipInfo("8.8.8.8")`

📍 Geolocation

Command	Description	Syntax	Example
`geolocateIp`	Geolocates an IP address	`geolocateIp(ip)`	`geolocateIp("8.8.8.8")`
`locateServer`	Locates physical server	`locateServer(ip)`	`locateServer("8.8.8.8")`

🖼️ Media Analysis

Command	Description	Syntax	Example
`RIS`	Reverse image search	`RIS(image)`	`RIS("image.jpg")`

📄 File Analysis

Command	Description	Syntax	Example
`metadata`	Extracts file metadata	`metadata(file)`	`metadata("document.pdf")`

Natural Language Queries

You don't always need to use exact command syntax. Cyphon's AI understands natural language:

Natural Query	Interpreted As
"scan google.com"	Multiple relevant commands
"who owns example.com"	`whois("example.com")`
"check DNS for domain.com"	`records("domain.com")`
"find subdomains of target.com"	`findSubdomain("target.com")`
"is malicious.com blacklisted?"	`blacklist("malicious.com")`
"what tech does site.com use?"	`technologies("site.com")`

Parameter Types

Type	Description	Examples
`domain`	A domain name	`example.com`, `google.com`
`url`	A full URL	`https://example.com/page`
`ip`	An IP address	`8.8.8.8`, `192.168.1.1`
`username`	A username/handle	`johndoe`, `admin`
`email`	An email address	`[email protected]`
`file`	A filename	`document.pdf`, `image.jpg`

Multiple Commands

A single natural language query can trigger multiple commands:

Query: "Full security scan of example.com"

Result:

whois("example.com")
records("example.com")
findSubdomain("example.com")
technologies("example.com")
domainSpoof("example.com")

Command Keywords

Each command has associated keywords that help the AI match queries:

Command	Keywords
`whois`	whois, domain, registration, owner, registrar
`txt`	txt, dns, records, domain, text
`findSubdomain`	subdomain, enumeration, discovery, recon, dns
`technologies`	technology, tech, stack, frameworks, libraries, cms
`domainSpoof`	dmarc, spoof, email, security, compliance

Tips for Best Results

Be specific: "whois for google.com" is better than "scan google"
Use domain format: Use example.com not www.example.com or https://example.com
IP format: Use proper IP format like 8.8.8.8
Check the Commands modal: Click the /Commands button to see all options
Combine queries: "DNS and WHOIS for domain.com" triggers multiple commands

Adding New Commands

To add a new command to Cyphon:

Backend: Add to cyphonCommands.ts

{
  name: "newCommand",
  description: "What it does",
  syntax: "newCommand(param)",
  parameters: [{ name: "param", type: "string", required: true, description: "..." }],
  keywords: ["relevant", "keywords"],
  example: 'newCommand("value")',
  category: "Category Name",
  icon: "mdi:icon-name"
}

UI: Add to CommandsModal.vue (for display)
Search Source: Implement the actual search logic in a BaseSearch class

Troubleshooting

Issue	Solution
"No commands found"	Try more specific keywords
Wrong command matched	Use exact command syntax
No results	Check if parameter is valid (real domain/IP)
Timeout	Some scans take time, wait for completion