Skip to content

Dethernety documentation

Guides for the platform, its modules, the Dethereal plugin and the BYODt cloud — from your first model to running it on your own infrastructure.

Your first threat finding in minutes

Run the platform on your own machine, draw a small model and see the threats on the routes to your data.

  1. 01Install with one command
  2. 02Draw four elements and their flows
  3. 03Open the Threat Report

You need Linux or macOS (Windows: WSL), Docker or Podman with more than 4 GB for its VM, and Node.js 18+ for the installer (without it, get-byodt.sh). The first install downloads a few GB: allow 30–60 minutes, mostly unattended. Drawing the model and reading its first finding then takes about 10 minutes.

Open the quick start npx @dether.net/byodt@0.14.0

When it asks Start the stack now?, answer y.

==>Up. Console: http://127.0.0.1:3000/console/
COMPANY NETWORKBrowseOrderCatalogSQLEXTERNALCustomerPROCESSWeb appPROCESSOrders APIparameterized queries: not answeredSTOREOrders DB
Critical · 9.8

Injection (SQLi / NoSQLi / OS command / LDAP) on Orders API

Why: Parameterized Queries Used is not answered, so the platform counts the protection as absent.

ATT&CK T1190 Exploit Public-Facing Application · T1059 Command and Scripting Interpreter

Flow route to the crown jewel: Customer → Orders API → Orders DB

Type to search every guide. Put a phrase in quotes to match it exactly, such as an error message. Use ↑ ↓ to move and Enter to open.

Guides