Tuhinshubhra/RED_HAWK
RED HAWK
RED_HAWK is a penetration testing framework and reconnaissance suite designed for information gathering and vulnerability assessment. It provides a toolkit for infrastructure reconnaissance, technology stack detection, automated web spidering, and security scanning.
The project distinguishes itself through a multi-stage reconnaissance pipeline that maps attack surfaces. This includes DNS-based infrastructure mapping to resolve network layouts and pattern-based detection to identify specific content management systems and server stacks.
The system covers a broad range of capabilities including network reconnaissance for subdomain discovery and target profiling, as well as automated web crawling to extract links and sensitive files. It also performs vulnerability scanning to identify software flaws and error-based SQL injection. Additionally, the framework integrates web analytics to assess domain authority and retrieve blog metadata via third-party APIs.
Features
- Penetration Testing Toolkits - Provides an integrated suite of tools for performing end-to-end security assessments and reconnaissance.
- Security Vulnerability Scanning - Provides comprehensive security scanning to identify flaws and reconnaissance data for penetration testing.
- Web Crawling Reconnaissance - Extracts links, social media profiles, and sensitive files via automated crawling as part of pre-exploitation reconnaissance.
- Web Vulnerability Scanning - Inspects websites for common security flaws such as SQL injection and outdated software.
- Hidden Page Discovery - Discovers reachable pages and hidden content by extracting links and navigating the target website.
- Infrastructure Mapping - Resolves network layouts and server locations using WHOIS records and reverse IP mappings.
- Attack Surface Mapping - Discovers subdomains and network infrastructure to visualize the full scope of a target environment.
- Infrastructure Reconnaissance - Performs automated network discovery, subdomain enumeration, and DNS analysis to map entry points.
- Reconnaissance Pipelines - Sequentially executes target intelligence gathering and subdomain discovery to build a comprehensive attack surface map.
- Web Vulnerability Scanners - Crawl web content and inspects headers to detect security misconfigurations and vulnerabilities.
- Subdomain Discoveries - Enumerates and maps all registered subdomains associated with a target domain.
- Penetration Testing Frameworks - Provides a comprehensive software environment for simulating attacks and identifying system vulnerabilities.
- Web Technology Detection - Profiles the software, server versions, and frameworks running on web endpoints to map the target infrastructure.
- CMS Fingerprinting - Identifies specific content management systems like WordPress or Joomla to help map the target technology stack.
- Web - Inspects targets for critical security flaws, including software version vulnerabilities and error-based SQL injection.
- Recursive Crawl Discoverers - Recursively crawls websites to discover pages and sensitive files for security testing.
- DNS Reconnaissance - Queries DNS records and collects server banners to map organizational infrastructure.
- CMS Detection for Import - Identifies website platforms like WordPress or Joomla by matching fingerprints in server responses.
- Network Reconnaissance Tools - Scans, maps, and gathers data from network environments including port scans and subnet calculation.
- Asset Profilers - Aggregates network assets, WHOIS records, and mail data into detailed target profiles.
- Web Stack Detectors - Identifies content management systems, web servers, and active services running on a domain.
- Web Crawling - Extracts links and sensitive files from websites to map hidden content.
- Web Crawlers - Automatically visits URLs and extracts links, social media profiles, and sensitive files.
