EdgeSecurityTeam/EHole
EHole
EHole is a specialized toolkit for network asset parsing, binary transformation, payload generation, and vulnerability research. It functions as an asset discovery and fingerprinting tool designed to identify software versions and high-value assets across IP ranges and URLs using custom fingerprints.
The project provides a vulnerability research toolkit for decrypting software credentials and retrieving factory default passwords for security devices and web applications. It also includes a security payload generator for encoding and escaping command strings to bypass shell tokenization and execute reverse shells across different operating systems.
The toolkit covers broader capability areas including network asset parsing to extract identifiers from raw text and security scanner outputs, binary data transformation for converting files to hexadecimal strings, and network target management for filtering and sorting IP address lists. It also features system identification through keyword matching and regular expressions to detect specific software versions.
Features
- Resource Fingerprinting - Implements a toolkit for identifying software versions and high-value assets across network ranges using custom fingerprints.
- External Asset Discovery - Implements external asset discovery by integrating with third-party search engine APIs to identify targets and software versions.
- Software Version Detection - Identifies specific software versions and high-value assets across IP addresses and URLs.
- Domain Extraction Parsers - Provides parsers to isolate IP addresses, domains, and subdomains from raw text and scanner outputs.
- Asset Discovery Integrations - Integrates with external search engine APIs to discover assets and fingerprint targets across IP ranges and CIDR blocks.
- Credential Recovery Utilities - Decrypts application ciphertexts and looks up default passwords for security gateways and management tools.
- Default Credential Lookups - Matches identified software versions against a database of known factory default usernames and passwords.
- Credential Decryptors - Implements reverse encryption to recover credentials and database connection strings from security gateways.
- OS-Specific Payload Templates - Templates command strings based on the target operating system to ensure compatible reverse shell execution.
- Payload Encoders - Formats commands and converts data to Base64 or hexadecimal to bypass shell restrictions.
- Reverse Shell Payloads - Creates formatted commands for downloading files or initiating reverse shells across different operating system environments.
- Vulnerability Research - Provides a research toolkit for decrypting software credentials and retrieving factory default passwords.
- Server Fingerprinting - Identifies specific server software versions by matching keywords and regular expressions in response bodies and headers.
- System Fingerprinting Tools - Uses custom rules and keyword matching to identify specific software and operating systems based on network responses.
- Target System Fingerprinting - Allows the creation of reusable JSON identification rules to specify target system names and matching keywords.
- Security Payload Generators - Ships a utility for encoding and escaping command strings to bypass shell tokenization and execute reverse shells.
- Software Version Signatures - Uses predefined JSON rules to identify specific software versions by matching keywords and regular expressions in responses.
- Scan Target Importers - Processes local files containing lists of URLs to perform bulk identification of software versions.
- Pattern-Based Extraction - Employs regular expressions to parse raw text and isolate networking identifiers like IP addresses and domain names.
- Shell Argument Escapers - Formats command strings to bypass shell interpretation and ensure special characters are processed correctly by Windows.
- Scan Result Parsing - Provides capabilities to parse network scan files to isolate and categorize discovered assets.
- Base64 Encoders - Provides utilities to transform shell commands into Base64 strings to bypass security filters during execution.
- Payload Encoders - Encodes command strings into Base64 format to bypass shell tokenization and preserve special characters.
- IP Address Range Calculators - Processes lists of IP addresses to isolate unique entries and calculate C-class network counts.
- Target List Sanitizers - Isolates individual IP addresses from blocks of text to create clean, organized target lists.
- Security Software Identification - Categorizes installed security and management software by comparing active system process names against a known library.
- Binary-to-Hexadecimal Conversions - Converts binary files into hexadecimal strings to facilitate the analysis and transmission of non-textual data.
- Scan Result Analyzers - Provides utilities to parse and filter raw security scanner outputs to isolate assets and categorize vulnerabilities.
- Target Management - Cleans and sorts IP address lists and CIDR blocks to create organized target sets for security assessments.
- Security Software Identifiers - Analyzes Windows process names to identify installed security software and operations management tools.
- Fingerprinting Tools - Tool for identifying web application frameworks and technologies.
