jasonxtn/Argus

Features

• Infrastructure Reconnaissance - Implements a modular framework for automated network discovery, subdomain enumeration, and DNS analysis to map security entry points.
• Security Reconnaissance Modules - Implements a modular engine that executes independent security tools as plugins through a standardized interface.
• Containerized Security Toolsets - Provides a containerized environment for executing specialized information-gathering modules consistently across different operating systems.
• Infrastructure Security Audits - Provides automated security assessments of network assets and cloud infrastructure to discover vulnerabilities and exposed credentials.
• Infrastructure Mapping - Performs DNS lookups, port scanning, and routing analysis to map network assets and their configurations.
• Intelligence Enrichment - Integrates external security APIs to enrich reconnaissance data with global threat intelligence and asset reputation.
• Posture Assessment Engines - Identifies security gaps by scanning for exposed environment files, leaked credentials, and cloud bucket exposures.
• Reconnaissance Workflow Automation - Provides a command-driven interface to search, select, and execute specialized information-gathering workflows.
• Web Vulnerability Scanners - Scans web applications by inspecting HTTP headers and crawling content to detect vulnerabilities and misconfigured security headers.
• Threat Intelligence Aggregation - Aggregates data from multiple external threat feeds and security APIs to produce comprehensive asset reputation results.
• Threat Intelligence Resources - Connects external security APIs to enrich gathered reconnaissance data with global asset reputation and threat feeds.
• Web Application Security Assessments - Analyzes web application structures and HTTP headers to find common vulnerabilities and exposed information.
• Web Application Analysis - Analyzes web applications through HTTP header inspection and content crawling to identify common vulnerabilities.
• Service Probing - Interacts with diverse system services like SNMP, SSH, and LDAP to identify and classify remote infrastructure.
• Security Configuration Auditing - Evaluates SSL/TLS configurations, cryptographic setups, and leaked credentials to identify security gaps.
• Data Filtering - Provides tools to filter and search cached output from gathering sessions to identify specific patterns or targets.
• Local State Caches - Provides a persistent local caching layer to store scan outputs for fast filtering and searching of historical data.
• Docker Container Deployments - Packages the reconnaissance toolset into Docker images for consistent deployment across diverse environments.
• Scan Configuration Profiles - Uses pre-defined configuration profiles to standardize concurrency limits and request timeouts across scanning modules.
• Protocol Interaction Tools - Interacts with network protocols such as SNMP, SSH, and LDAP to retrieve remote system and directory data.
• Passive Intelligence Gathering - Scrapes and parses web content to gather technical intelligence on application structures and exposed information.
• Reconnaissance Workflow Orchestrators - Orchestrates the execution of specialized reconnaissance modules against defined targets using configurable threads and profiles.
• Container-Based Isolation - Packages the toolset and dependencies into Docker images to ensure consistent execution across different operating systems.
• Command-Driven Orchestrators - Orchestrates the selection and sequencing of discovery modules through a structured command line interface.

Star history