Halcyon IDE

An IDE for Nmap Script (NSE) Development.

Halcyon is the first IDE specifically focused on Nmap Script (NSE) Development. This research idea was originated while writing custom Nmap Scripts for Enterprise Penetration Testing Scenarios. The existing challenge in developing Nmap Scripts (NSE) was the lack of a development environment that gives easiness in building custom scripts for real world scanning, at the same time fast enough to develop such custom scripts. Halcyon is free to use, java based application that comes with code intelligence, code builder, auto-completion, debugging and error correction options and also a bunch of other features like other development IDE(s) has. This research was started to give better development interface/environment to researchers and thus enhance the number of NSE writers in the information security community.

Halcyon IDE can understand Nmap library as well as traditional LUA syntax. Possible repetitive codes such as web crawling, bruteforcing etc., is pre-built in the IDE and this makes easy for script writers to save their time while developing majority of test scenarios.

License and Copyright

Halcyon is under GNU General Public License v3.0. It is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/

Release Notes

Halcyon 2.0 March 31, 2016

  • Stable Release
  • Improved user interface
  • Added more code intelligence rules
  • Updates in code builder
  • Easy scan configuration wizard
  • TCP/UDP Scan Settings
  • Post Development Actions - Export/Update Scripts
  • Some bug fixes

Halcyon Beta 1.1 July 9, 2014

  • UI design
  • Code intelligence
  • Code builder
  • Auto completion
  • Debugging


September 22, 2016 Presenting at ROOTCON 10
Augest 25, 2016 Presented at HITBGSEC
Augest 4, 2016 Presented at Blackhat USA Arsenal 2016
March 31, 2016 Presented at Blackhat Asia Arsenal 2016
February 21, 2015 Mentioned in “Mastering the Nmap Scripting Engine” By Paulino Calderón Pale
February 05, 2015 Presented at Nullcon 2015
Mid 2014 The project started as my evening coffee shop research with an initial idea of building something useful and handy for my own regular NSE development. I thank my good friend @washalsec for appreciating the project and encouraging me to make it available for the community.

Books, Articles, Conferences and Presentations

  • Presenting at ROOTCON 10  
  • Presented at HITB GSEC 2016      
  • Presented at BlackHat USA Arsenal 2016  
  • Presented at BlackHat Asia Arsenal 2016    
  • “Mastering the Nmap Scripting Engine” By Paulino Calderón Pale  
  • Presented at Nullcon 2015      


Contact Author

Sanoop Thomas
i.am.s4n7h0 [at] gmail [dot] com

Black Hat Arsenal