leebaird/discover
Discover
Discover este un toolkit de testare a penetrării bazat pe bash, conceput pentru a automatiza sarcinile de recunoaștere, scanare și enumerare. Funcționează ca o suită cuprinzătoare pentru colectarea de informații open-source (OSINT), recunoașterea rețelei, auditarea containerelor, generarea de payload-uri și parsarea datelor de securitate.
Proiectul se distinge prin integrarea mai multor fluxuri de lucru specializate, inclusiv un framework OSINT pasiv pentru extragerea metadatelor companiei, o suită de recunoaștere a rețelei pentru maparea suprafețelor de atac și un auditor de securitate a containerelor pentru identificarea vulnerabilităților și secretelor în imagini și clustere. Include, de asemenea, un generator de payload-uri Metasploit care creează reverse shells pe diverse arhitecturi și automatizează configurarea listener-elor de rețea.
Toolkit-ul acoperă o suprafață largă de operațiuni de securitate, cuprinzând scanarea vulnerabilităților aplicațiilor web pentru configurări greșite WAF și OAuth, auditarea infrastructurii pentru certificate SSL și transformarea output-ului structurat XML al instrumentelor de securitate în format CSV.
Toolkit-ul este conceput pentru execuție pe Kali Linux și Ubuntu.
Features
- Penetration Testing Toolkits - Provides a comprehensive collection of automated scripts for network scanning, reconnaissance, and security auditing.
- Network Reconnaissance Tools - Coordinates multiple tools to automate domain research, network scanning, and service enumeration for comprehensive reconnaissance.
- Port Scanning - Identifies open network ports and running services using specialized scanning modules.
- Payload Generation - Produces specialized reverse shell binaries tailored for specific target operating systems and architectures.
- OSINT Automation Frameworks - Automates the extraction of company metadata and domain information from public records and search engines.
- Security Auditing - Scans container images and orchestration clusters for vulnerabilities, leaked secrets, and misconfigurations.
- Metasploit Payload Automations - Automates the creation and deployment of Metasploit reverse shell payloads and listeners.
- Exploit Payload Generators - Generates malicious payloads and shellcode templates to facilitate security testing and exploitation.
- Automatizări de Configurare a Listener-ului - Automates the setup of network listeners to capture connections from deployed reverse shell payloads.
- Network Reconnaissance Tools - Provides utilities for scanning, mapping, and gathering data from target network environments.
- Passive Intelligence Gathering - Collects organizational and technical metadata from public records using non-intrusive passive intelligence gathering.
- Payload Listener Configurations - Configures network parameters like LHOST and LPORT to capture incoming traffic from security payloads.
- Web Vulnerability Scanners - Identifies web application vulnerabilities such as open redirects and insecure object references using automated scanners.
- Reverse Shell Payloads - Generates operational reverse shell payloads tailored for various operating systems and hardware architectures.
- Network Host Discoverers - Provides utilities for identifying active network hosts using ARP scans and ping sweeps.
- Bash-Based Tool Orchestrators - Provides a shell script framework that coordinates the execution of multiple security and reconnaissance tools.
- Container Security Scanners - Audits container images and orchestration clusters for vulnerabilities, leaked secrets, and misconfigurations.
- Certificate Auditors - Checks SSL and TLS certificates for vulnerabilities and configuration issues using scanning utilities.
- Asset Profilers - Merges discovered identities and subdomains with external research to build detailed target profiles.
- Web Application Vulnerability Scanners - Scans web services for vulnerabilities including open redirects and OAuth misconfigurations.
- Domain Reconnaissance - Custom bash scripts for domain and network reconnaissance.
