jasonxtn/Argus
Argus
Argus is a modular network reconnaissance framework designed for gathering network intelligence, mapping infrastructure, and assessing security postures through automated discovery tasks. It operates as a containerized security toolset that allows for the consistent execution of specialized information-gathering modules across different operating systems.
The system functions as an infrastructure audit tool and a web application security scanner, performing tasks such as DNS lookups, port scanning, and the inspection of HTTP headers to detect vulnerabilities. It also serves as a threat intelligence integrator by connecting to external security APIs to enrich reconnaissance data with global asset reputation and threat feeds.
The framework covers network infrastructure reconnaissance, security configuration auditing for cryptographic setups and SSL/TLS fingerprints, and web intelligence gathering. It includes capabilities for interacting with network protocols such as SNMP, SSH, and LDAP to retrieve remote system and directory data.
The software supports automated installation and deployment via Docker images to ensure environment isolation.
Features
- Infrastructure Reconnaissance - Implements a modular framework for automated network discovery, subdomain enumeration, and DNS analysis to map security entry points.
- Security Reconnaissance Modules - Implements a modular engine that executes independent security tools as plugins through a standardized interface.
- Containerized Security Toolsets - Provides a containerized environment for executing specialized information-gathering modules consistently across different operating systems.
- Infrastructure Security Audits - Provides automated security assessments of network assets and cloud infrastructure to discover vulnerabilities and exposed credentials.
- Infrastructure Mapping - Performs DNS lookups, port scanning, and routing analysis to map network assets and their configurations.
- Intelligence Enrichment - Integrates external security APIs to enrich reconnaissance data with global threat intelligence and asset reputation.
- Posture Assessment Engines - Identifies security gaps by scanning for exposed environment files, leaked credentials, and cloud bucket exposures.
- Reconnaissance Workflow Automation - Provides a command-driven interface to search, select, and execute specialized information-gathering workflows.
- Web Vulnerability Scanners - Scans web applications by inspecting HTTP headers and crawling content to detect vulnerabilities and misconfigured security headers.
- Threat Intelligence Aggregation - Aggregates data from multiple external threat feeds and security APIs to produce comprehensive asset reputation results.
- Threat Intelligence Resources - Connects external security APIs to enrich gathered reconnaissance data with global asset reputation and threat feeds.
- Web Application Security Assessments - Analyzes web application structures and HTTP headers to find common vulnerabilities and exposed information.
- Web Application Analysis - Analyzes web applications through HTTP header inspection and content crawling to identify common vulnerabilities.
- Service Probing - Interacts with diverse system services like SNMP, SSH, and LDAP to identify and classify remote infrastructure.
- Security Configuration Auditing - Evaluates SSL/TLS configurations, cryptographic setups, and leaked credentials to identify security gaps.
- Data Filtering - Provides tools to filter and search cached output from gathering sessions to identify specific patterns or targets.
- Local State Caches - Provides a persistent local caching layer to store scan outputs for fast filtering and searching of historical data.
- Docker Container Deployments - Packages the reconnaissance toolset into Docker images for consistent deployment across diverse environments.
- Scan Configuration Profiles - Uses pre-defined configuration profiles to standardize concurrency limits and request timeouts across scanning modules.
- Protocol Interaction Tools - Interacts with network protocols such as SNMP, SSH, and LDAP to retrieve remote system and directory data.
- Passive Intelligence Gathering - Scrapes and parses web content to gather technical intelligence on application structures and exposed information.
- Reconnaissance Workflow Orchestrators - Orchestrates the execution of specialized reconnaissance modules against defined targets using configurable threads and profiles.
- Container-Based Isolation - Packages the toolset and dependencies into Docker images to ensure consistent execution across different operating systems.
- Command-Driven Orchestrators - Orchestrates the selection and sequencing of discovery modules through a structured command line interface.
