config.example.json

{
  "chaos_api_key": "YOUR_PROJECTDISCOVERY_CHAOS_API_KEY",
  "h1_api_token": "YOUR_HACKERONE_API_TOKEN",
  "output_dir": "./findings",
  "recon_dir": "./recon",
  "reports_dir": "./reports",
  "nuclei_severity": ["critical", "high", "medium"],
  "katana_depth": 3,
  "ffuf_threads": 40,
  "interactsh_server": "oast.pro",

  "_brain_comment": "Set BRAIN_PROVIDER env var to force a specific LLM provider. Auto-detect picks the first available.",
  "_brain_model_comment": "Set BRAIN_MODEL for a one-off model override, or use bughunter setup to save a per-provider choice.",
  "models": {
    "ollama": "qwen2.5:14b"
  },
  "_brain_providers": {
    "ollama":      "OLLAMA_HOST=http://localhost:11434  (free, local)",
    "groq":        "GROQ_API_KEY=...  (free tier — llama-3.3-70b)",
    "deepseek":    "DEEPSEEK_API_KEY=...  (very cheap — deepseek-v4-flash / deepseek-v4-pro)",
    "cerebras":    "CEREBRAS_API_KEY=...  (fastest cloud inference — llama3.3-70b)",
    "gemini":      "GEMINI_API_KEY=...  (Google — gemini-2.0-flash / gemini-2.5-pro)",
    "kimi":        "MOONSHOT_API_KEY=...  (Kimi / Moonshot AI — 128K context)",
    "mistral":     "MISTRAL_API_KEY=...  (codestral-latest great for code analysis)",
    "together":    "TOGETHER_API_KEY=...  (Llama-3.3-70B / Qwen in cloud)",
    "perplexity":  "PERPLEXITY_API_KEY=...  (sonar-pro — live web search)",
    "claude":      "ANTHROPIC_API_KEY=...  (claude-sonnet-4-6 / opus-4-8)",
    "openai":      "OPENAI_API_KEY=...  (gpt-4o / o1)",
    "grok":        "XAI_API_KEY=...  (grok-4.5 / grok-4.3)",
    "openrouter":  "OPENROUTER_API_KEY=...  (anthropic/claude-sonnet-4.6 / openai/gpt-4o / …)",
    "orcarouter":  "ORCAROUTER_API_KEY=...  (openai/gpt-4o / orcarouter/auto / …)"
  }
}