persona-non-gratta/lolyz-automation-tool-for-reconnaissance — explained in plain English
Analysis updated 2026-05-18
Run a single command to perform port scanning, directory discovery, and basic vulnerability checks against a target you have permission to test.
Use silent mode to produce cleaner scan logs without banner output for scripting or reporting.
Pair the tool with SecLists wordlists to improve ffuf's content discovery results.
Learn how nmap, ffuf, and nikto can be chained together as a starting template for your own recon scripts.
| persona-non-gratta/lolyz-automation-tool-for-reconnaissance | hannes/quack | malept/github-action-gh-pages | |
|---|---|---|---|
| Stars | 3 | 3 | 3 |
| Language | Shell | Shell | Shell |
| Last pushed | — | 2024-06-05 | 2025-08-14 |
| Maintenance | — | Dormant | Quiet |
| Setup difficulty | moderate | moderate | moderate |
| Complexity | 2/5 | 4/5 | 2/5 |
| Audience | developer | developer | developer |
Figures from each repo's GitHub metadata at analysis time.
Requires nmap, ffuf, and nikto pre-installed and on your PATH, ffuf and nikto come from the AUR on Arch Linux.
LOLYZ, also called Lord of the Lollies: Year Zero, is a small Bash script that wraps three well known security scanning tools, nmap, ffuf, and nikto, into a single command. Instead of running each tool separately during the early stage of a web security check, you run one script and it handles port and service scanning, directory and content discovery, and basic web server vulnerability checks in sequence. Before using it, you need nmap, ffuf, and nikto already installed and available on your system's command path, and the README gives install commands for both Arch Linux and Debian or Ubuntu based systems, noting that ffuf and nikto come from the Arch User Repository on Arch. It also recommends pairing the tool with SecLists, a popular open collection of wordlists, to get better results out of ffuf's content discovery. Usage is a single command pointing at a target, with one documented flag, a silent mode that suppresses the tool's banner output for cleaner logs. The author describes this project plainly as a personal learning exercise built right after finishing a beginner Bash scripting course, done to test their own skills rather than as a professional security product, and says they are not pursuing a scripting career from it. The README also discloses that some features, like timestamped logging, and several bug fixes were built with help from Claude, an AI assistant, to make the tool safer and more convenient. The project welcomes contributions and pull requests, and the author lists several areas that could use improvement, including better error handling, more scan profiles, and configuration file support. The project is released under the MIT license.
LOLYZ is a Bash script that chains nmap, ffuf, and nikto into one command to automate the early recon steps of a web security scan.
Mainly Shell. The stack also includes Shell, nmap, ffuf.
Use freely for any purpose, including commercial use, as long as you keep the copyright notice.
Setup difficulty is rated moderate, with roughly 30min to a first successful run.
Mainly developer.
This repo across BitVibe Labs
Don't trust strangers blindly. Verify against the repo.