Advanced parser & formatter for Nmap
and RustScan outputs
A focused transformation layer that sits between your scanning tools and your analysis workflow. Pipe in raw output, get structured results.
Pipe RustScan output with Nmap flags and Deluge auto-detects interactive mode -- spawning concurrent scans per discovered port with live progress.
Factory-pattern parser registry auto-detects Nmap XML, Nmap stdout, and RustScan formats. Hand it any supported input and it figures out the rest.
Generate JSON, CSV, HTML, XML, and TXT reports from a single scan. Use --export-format all to get everything at once.
Rich-powered tables, panels, and progress bars styled with the Catppuccin Mocha palette. Color-coded ports, services, OS info, and script results.
Prerequisite detection for Nmap with OS-specific install instructions. Privilege warnings for scans requiring root. Rich-formatted error messages.
Interactive mode runs configurable worker threads that execute targeted Nmap scans in parallel. Results merge under a thread lock for safe access.
Full OS detection with match accuracy, traceroute hops with RTT, and NSE script output parsed and formatted per port with structured panels.
Every open service automatically links to its HackTricks enumeration guide. Covers 40+ services with smart port and service-name matching and deduplication.
Input is parsed into a Pydantic model, then rendered to terminal or exported to files. No framework, no build step, just a pip-installable CLI.
Self-registering parsers via @ParserFactory.register decorator. Registration order sets priority -- nmap_xml first, then nmap_stdout, then rustscan.
Strict validation with ScanResult → HostInfo → PortInfo hierarchy. Type safety throughout, automatic serialization for all export formats.
All output through Rich -- tables, panels, progress bars, and Live displays. Catppuccin Mocha hex constants. Smart TTY detection for clean piped output.
Interactive mode reads RustScan stdin in one thread, spawns worker threads for targeted Nmap scans, and merges results via threading.Lock for safe concurrent access.
Install with pipx, pipe in your scan data, and let Deluge handle the formatting. No configuration needed.
Deluge is a transformation layer, not a wrapper. It doesn't execute scans -- it makes existing scan outputs infinitely better.
Interactive mode is automatic -- when Deluge detects Nmap arguments on stdin, it switches from simple parsing to concurrent targeted scanning with live progress bars. No flag needed.
Export to json, csv, html, xml, or txt with a single flag. Outputs land in timestamped subdirectories.