Ravage is provided purely for research. It is a research and development project for controlled, authorized web security testing in local labs and approved benchmark environments. It is intended only for defensive research, education, and reproducible evaluation.
Do not use Ravage to attack, scan, exploit, disrupt, access, or enumerate any real system, network, account, service, application, or target unless all of the following are true:
The included lab boxes intentionally contain serious vulnerabilities. Run them only on localhost or an isolated private lab network. Do not expose them to the public internet, a shared network, customer environments, employer systems, or production infrastructure.
Flags, seeded credentials, vulnerable services, benchmark manifests, and operator notes are included only to support controlled local evaluation. They are not permission to target third-party systems.
You are solely responsible for how you use this software. The project authors, contributors, and maintainers are not responsible or liable for misuse, unauthorized activity, data loss, service disruption, legal consequences, or any other harm or damage arising from use of this repository.
You assume all risk for installing, running, modifying, copying, or relying on this repository. No output, finding, recommendation, exploit chain, benchmark result, documentation, or generated report should be treated as legal, professional, compliance, security, or operational advice.
To the maximum extent permitted by law, the project authors, contributors, maintainers, and copyright holders disclaim all warranties and liability arising from this repository, including liability for direct, indirect, incidental, special, consequential, exemplary, punitive, or other damages.
If you are unsure whether an activity is authorized, do not run it.
Technical guardrails in the CLI, including localhost-first target checks, are best-effort safety controls. They are not permission to test any system and are not a substitute for written authorization, rules of engagement, and human judgment.