Quick start

The fastest way to try Hellion is with Docker Compose. The stack includes OWASP Juice Shop as a sample target.

Docker

git clone https://github.com/AllanGallop/Hellion.git
cd Hellion
docker compose up --build

Service	URL
Web UI + API	http://localhost:8080
Juice Shop	http://localhost:3000
NATS monitor	http://localhost:8222

Open http://localhost:8080 for the web UI. Use http://juice-shop:3000 as the target when creating runs — workers resolve targets on the Docker network, not localhost.

Create a run (curl)

curl -X POST http://localhost:8080/runs \
  -H "Content-Type: application/json" \
  -d '{
    "scope_id": "local-juice-shop",
    "targets": ["http://juice-shop:3000"],
    "test_pack": "juice-shop-detect"
  }'

Poll status

curl http://localhost:8080/runs/stats
curl http://localhost:8080/runs/{run_id}
curl http://localhost:8080/runs/{run_id}/events

End-to-end test

bash tests/e2e.sh

Scale workers

docker compose up -d --scale worker-rust=4

See Architecture for how jobs flow through NATS and Postgres.