An Interactive Penetration Testing Workbench Powered by the Yaklang Security Programming Language (CDSL)
Download English Installers • Whitepaper • Official Website (EN) • Official Documentation • Issue Feedback • Architecture
Yakit English Edition is an automated fork of the powerful cyber security ALL-IN-ONE platform yaklang/yakit. This repository automatically syncs with the upstream master branch every 6 hours, translates all UI locales (
zhtoen), security plugins (.yak), and vulnerability PoC YAML metadata into professional English using an advanced glossary-backed translation engine, and delivers fully compiled cross-platform installers.
- 🌐 Full English UI Out of the Box: The default language (
i18n.ts) is permanently locked to English (en), eliminating Chinese localization barriers. - 🤖 Automated Upstream Sync & Translation: Runs a cron workflow every 6 hours to fetch the latest security tools, vulnerability templates, and engine improvements from upstream without manual intervention.
- 🛡️ Security Glossary Engine: Utilizes a specialized mapping dictionary (
security_glossary.json) to accurately translate Red Team terms (e.g., 免杀 ➔ AV Evasion, 内存马 ➔ MemShell, 反连平台 ➔ OOB Reverse Server, 漏洞检测 ➔ Vulnerability Detection). - 📦 Automated Cross-Platform Releases: Fully compiled, ready-to-use binaries for Windows, macOS (Apple Silicon & Intel), and Linux are automatically built and published via GitHub Actions on every upstream release tag.
Pre-built installers with English (en) enabled by default (including translated UI, .yak plugins, and PoC YAML metadata) are published automatically on the Releases Page:
| Operating System | Architecture | Package Format | Download |
|---|---|---|---|
| Windows | x64 (amd64) |
.exe (NSIS Installer) |
Latest Windows .exe |
| macOS | Apple Silicon (arm64) & Intel (x64) |
.dmg |
Latest macOS .dmg |
| Linux | x64 (amd64) & arm64 |
.AppImage |
Latest Linux .AppImage |
Security integration represents a major evolution in enterprise security operations and offensive testing workflows.
Built around the concept of unified security engineering, the Yaklang team created Yaklang—a vertical Domain-Specific Language (CDSL) purpose-built for cybersecurity:
- For tools that cannot be natively integrated, Yaklang provides clean, high-performance native rewrites.
- For mature open-source security ecosystems, Yaklang directly compiles and integrates them at the engine level.
- For security practitioners who prefer visual workflows without writing code, Yakit provides a full-featured graphical workbench connected to the Yaklang engine over gRPC.
Prerequisites:
- Node.js 22.22.x (recommended) and Yarn 1.x
- Git
- Windows, macOS, or Linux
Steps:
-
Clone the repository:
git clone https://github.com/professoxrmoriarty/yakit.git cd yakit git checkout english-edition # Switch to English branch
If you prefer to run the English edition directly from source code:
# 1. Clone the repository
git clone [https://github.com/professoxrmoriarty/yakit.git](https://github.com/professoxrmoriarty/yakit.git)
cd yakit
# 2. Switch to the English edition branch
git checkout english-edition
# 3. Install dependencies using the unified CLI
yarn cli install
# 4. Start development server or build production bundle
yarn cli start -v yakit
- Windows SmartScreen Notice: Because binaries are compiled via automated community CI without commercial EV certificates, Windows Defender SmartScreen may show an unrecognized app warning. Click More info ➔ Run anyway to proceed.
- macOS Quarantine Notice: If macOS marks the app as damaged or from an unidentified developer, run the following command in your Terminal:
sudo xattr -rd com.apple.quarantine /Applications/Yakit.app
This repository automatically tracks yaklang/yakit. All core platform features, vulnerability checks, and script engines remain 100% synchronized with the official release cycles while maintaining a clean English interface layer.
Licensed under the Apache 2.0 License. Original project developed and maintained by the Yaklang Team.
- Open the repository on GitHub and select the Actions tab.
- Select Sync Upstream & Auto-Translate or Build & Release English Edition in the workflow list.
- Review the latest run. To start a manual run, select Run workflow if the button is available, choose the branch, and confirm.
- Open the run and inspect each job's logs. A successful run shows a green check; investigate any failed step in its log.
The Run workflow button is available only when the workflow supports workflow_dispatch and the repository permits manual runs. The sync workflow may change repository files, so review its results before merging or publishing them.