From 866cb32987986129faacb06f528df5186ba06532 Mon Sep 17 00:00:00 2001 From: Tib3rius <48113936+Tib3rius@users.noreply.github.com> Date: Tue, 21 May 2019 12:00:20 -0400 Subject: [PATCH] Updated wpscan and dirb commands. Fixes #9 --- config/service-scans.toml | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/config/service-scans.toml b/config/service-scans.toml index cc1d5be..b8c02bc 100644 --- a/config/service-scans.toml +++ b/config/service-scans.toml @@ -143,8 +143,8 @@ ignore-service-names = [ [[http.manual]] description = '(dirb) Recursive directory/file enumeration for web servers using various wordlists (same as dirsearch above):' commands = [ - 'dirb {scheme}://{address}:{port}/ -o "{scandir}/{protocol}_{port}_{scheme}_dirb_big.txt" /usr/share/seclists/Discovery/Web-Content/big.txt', - 'dirb {scheme}://{address}:{port}/ -o "{scandir}/{protocol}_{port}_{scheme}_dirb_dirbuster.txt" /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt' + 'dirb {scheme}://{address}:{port}/ /usr/share/seclists/Discovery/Web-Content/big.txt -o "{scandir}/{protocol}_{port}_{scheme}_dirb_big.txt"', + 'dirb {scheme}://{address}:{port}/ /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -o "{scandir}/{protocol}_{port}_{scheme}_dirb_dirbuster.txt"' ] [[http.manual]] @@ -157,7 +157,7 @@ ignore-service-names = [ [[http.manual]] description = '(wpscan) WordPress Security Scanner (useful if WordPress is found):' commands = [ - 'wpscan --url {scheme}://{address}:{port}/ --no-update -e vp,vt,tt,cb,dbe,u,m -f cli-no-color 2>&1 | tee "{scandir}/{protocol}_{port}_{scheme}_wpscan.txt"' + 'wpscan --url {scheme}://{address}:{port}/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "{scandir}/{protocol}_{port}_{scheme}_wpscan.txt"' ] [[http.manual]] @@ -207,6 +207,12 @@ service-names = [ ports.tcp = [139, 389, 445] ports.udp = [137] + [[ldap.manual]] + description = 'ldapsearch command (modify before running)' + commands = [ + 'ldapsearch -x -D "" -w """ -p {port} -h {address} -b "dc=example,dc=com" -s sub "(objectclass=*) 2>&1 | tee > "{scandir}/{protocol}_{port}_ldap_all-entries.txt"' + ] + [mongodb] service-names = [