IronBullet is a desktop automation toolkit built around a visual, drag-and-drop pipeline editor. Chain together 50+ specialized blocks — HTTP requests, parsers, crypto functions, browser automation, protocol clients — and run them against full datasets with multi-threaded job execution.
| Block pipeline editor | Drag-and-drop interface with 50+ block types across 8 categories |
| Debug mode | Step-through execution with live request/response viewer and variable inspector |
| Multi-threaded jobs | Configurable thread pools, proxy rotation, ban detection, gradual ramp-up |
| Intellisense | Context-aware autocomplete in all input fields — variables, headers, delimiters, response body predictions |
| TLS fingerprinting | AzureTLS, RustTLS, and WreqTLS backends with per-block JA3/HTTP2 fingerprint control |
| MITM capture | Built-in proxy captures browser traffic for Site Inspector — export as JSON/HAR |
| Code export | Export any pipeline as standalone Rust source code |
| Plugin system | Hot-loadable plugins extend the block palette without recompiling |
| OB2 import | Import OpenBullet 2 / SilverBullet configs (.svb, .opk, .loliScript) |
Download the latest release for your platform:
| Platform | File |
|---|---|
| Windows | ironbullet-vX.X.X-windows-x64.zip |
| Linux | ironbullet-vX.X.X-linux-x64.zip or .AppImage |
Extract and run ironbullet (or ironbullet.exe). The sidecar binary (reqflow-sidecar / reqflow-sidecar.exe) must be in the same directory.
Linux users: The AppImage bundles all dependencies including WebKit. The
.zipbuild requireswebkit2gtk-4.1to be installed.
- Launch IronBullet
- Add blocks from the left palette or press Ctrl+K
- Click a block to open its settings in the right panel
- Press F5 to run a debug test with a single data line
- Open the Response Viewer to inspect HTTP traffic
- Create a Job to process a full wordlist with multiple threads
HTTP — Requests with full header/cookie/body control
HttpRequest— Send HTTP/1.1, HTTP/2, HTTP/3 requests via AzureTLS, RustTLS, or WreqTLS- Custom headers, cookies, body (form/raw/multipart)
- Per-request JA3, HTTP/2 fingerprint, proxy, and browser profile overrides
Parsing — Extract data from responses
ParseLR— Left/right delimiter extractionParseJSON— JSON path (dot notation)ParseRegex— Regular expression with capture groupsParseCSS— CSS selector + attribute extractionParseXPath— XPath queriesParseCookie— Extract specific cookie values
Functions — Transform and compute
StringFunction— Replace, trim, encode/decode, split, random stringCryptoFunction— MD5, SHA1/256/512, HMAC, BCrypt, AESConversionFunction— Type casts, Base64, Hex, URL, bytes, BigIntDateFunction— Format, parse, add/subtract time, Unix timestampJwtToken— Sign and verify HS256/384/512 JWTsHeaderSpoof— Inject randomized forwarding IP headers
Control — Flow and logic
IfElse— Conditional branchingLoop— Iterate over lists or repeat N timesSetVariable,CaseSwitch,Script(JavaScript),Delay
Browser — Headless automation
- Open, navigate, click, type, wait, screenshot, execute JS
- Cookie and session management
Protocols — Raw network clients
- TCP, UDP, WebSocket, FTP, SSH, IMAP, SMTP, POP3
Bypass — Anti-bot handling
CaptchaSolver— Integrate third-party solver APIsCloudflareBypass— FlareSolverr integrationLaravelCsrf— Auto-fetch CSRF tokens
Utilities
Log,Webhook,CookieContainer,FileSystem,Plugin
Requirements: Rust 1.80+, Node.js 20+, Go 1.23+
git clone https://github.com/ZeraTS/ironbullet.git
cd ironbullet
# 1. Build the frontend
cd gui && npm install && npm run build && cd ..
# 2. Build the sidecar
cd sidecar && go build -o reqflow-sidecar && cd ..
# 3. Build the app
cargo build --releaseThe binary is at target/release/ironbullet. Copy it alongside reqflow-sidecar to run.
Cross-compile for Windows (from Linux):
cargo build --release --target x86_64-pc-windows-gnuMIT — see LICENSE for details.
