blackflag.tech — The Privateer Network

════════════════════════════════════════════════════════════════════════════════

☽PRIVATEER_RECORD

The carronade was a short-barrelled naval cannon designed for one purpose: devastating close-range destruction. Crews called it "the smasher." At distance it was useless, but pointed at something nearby, it was absolute. Your own infrastructure is close range. CARRONADE puts the muzzle to every port, every service, every exposed endpoint, and fires.

╔══ DESCRIPTION ═════════════════╗

Every unpatched port is an open gun port. Every misconfigured service is a loose cannon. Every expired certificate is a hull breach. Before an adversary maps your infrastructure, CARRONADE does. It fires every known probe simultaneously at your own domains, servers, and network perimeter, then hands you the damage report while you can still do something about it.

╔══ CAPABILITIES ════════════════╗

▸Port and service enumeration: full TCP/UDP sweep of your target infrastructure; identify every open port and the service fingerprint behind it

▸CVE matching: compare running service versions against the NVD database; flag known vulnerabilities with CVSS severity scores and patch references

▸TLS/SSL audit: test certificate validity, cipher suite strength, protocol downgrade vulnerabilities (BEAST, POODLE, ROBOT), and HSTS enforcement

▸DNS misconfiguration scanner: detect zone transfer exposure, dangling CNAME records, missing SPF/DKIM/DMARC, subdomain takeover candidates

▸Exposed service detection: identify admin panels, unauthenticated APIs, open S3 buckets, exposed .git directories, and default credentials on common services

▸HTTP security header audit: test for missing CSP, X-Frame-Options, Referrer-Policy, and other browser-enforced mitigations

▸Firewall response analysis: map firewall rule behaviour from response patterns; identify filtered vs closed vs open distinctions

▸Attack surface report: generate a prioritised remediation dossier with severity ratings, affected assets, and recommended fixes

╔══ SECURITY_PROTOCOLS ══════════╗

■Strict scope enforcement: CARRONADE requires explicit target declaration; it will not scan any asset not on the verified target list

■Rate limiting: all probes are paced to avoid triggering upstream DDoS protections or causing service disruption

■Local execution: no scan data or results transmitted to any external server; all processing and reporting is on-device

■Scan log encryption: all scan history stored AES-256-GCM encrypted at rest; accessible only with your master passphrase

■Legal declaration prompt: CARRONADE requires acknowledgment of authorized target scope before every scan session

╔══ LICENSE_TERMS ════════════════╗

Single-operator license. CARRONADE is authorized for use against infrastructure you own or have explicit written permission to test. Unauthorized use against third-party systems is illegal under the CFAA (US), Computer Misuse Act (UK), and equivalent statutes globally. Not for redistribution.

ACQUISITION_COST: $49.99 USD

SELECT_PLATFORM:

SECURE PAYMENT VIA STRIPE · INSTANT DIGITAL DELIVERY · VERIFIED PRIVATEERS ONLY

SCANNING_MANIFEST