Commit Graph

43 Commits

Author SHA1 Message Date
MrMatch246 8af0595cd6 Fixed ' that breaks md highlighting in obsidian 2025-09-17 11:49:16 +02:00
MrMatch246 3d82bb70e5 fixed reporting-markdown.py 2025-08-13 16:46:05 +02:00
MrMatch246 220cb06ae0 added nuclei 2025-08-12 17:18:59 +02:00
VainXploits fd87c99abc
Fixed issue and added feature (#241)
* feature update

* Changed spaces to tabs.

---------

Co-authored-by: Tib3rius <48113936+Tib3rius@users.noreply.github.com>
2025-05-27 13:56:28 -04:00
Tib3rius 39680e875e Bug Fixes
Removed the wkhtmltoimage plugin as this is no longer compatible with Kali Linux.
Fixed bug which crashed AutoRecon if a plugin check() function failed. Now AutoRecon exits gracefully.
Added --ignore-plugin-checks which will ignore failed plugin checks but also disable said plugins at runtime.
2025-04-04 23:00:48 -04:00
Asim Aziz 1160474b23
smbmap commandline changes (#208)
* Update ldap-search.py

Removed extra quotes after <password> in manual command

* Update ldap-search.py

Hi Tib3rius
ldapsearch has updated syntax.
-h and -p have been Deprecated in favor of -H
New syntax is -H ldap://<IP>:<PORT>

* Update smbmap.py

Some command line arguments have changed since the update to smbmap.
2023-09-03 18:03:46 -04:00
Tib3rius 918f9b900f Bug fix.
Fixes a "flaw" in ffuf where a fuzzed virtual host may not be discovered due to non-standard error status codes being used (e.g. if SNI is in play).
2023-02-27 18:01:07 -05:00
Tib3rius a9608d663d Bug fixes and updates.
Fixed bug in dirbuster and vhost-enum plugins. Redirections are now followed. This could potentially cause issues down the line but for now it seems to work.
Have re-enabled nikto as an auto-run plugin, however several constraints are in place to ensure it doesn't take too long.
2023-02-19 17:16:27 -05:00
Tib3rius 851ffbd316 Plugin updates, bug fix, and feature update.
A few manual plugin updates (command formatting etc.)
Fixed bug where processes were left running after AutoRecon is cancelled and/or times out.
Status messages now include PIDs of running processes if verbosity >= 2.

Closes #183
Fixes #184
2023-01-10 16:24:14 -05:00
Tib3rius 65fc104b2d Updates & bug fixes.
Plugins & wordlists are now stored in ~/.local/share/AutoRecon.
Default config / global config files are still stored in ~/.config/AutoRecon.
Removed feature which used the cwd's config.toml, global.toml, and plugins dir if detected.
Fixed bug which wouldn't generate combined reports in some cases.
2022-12-07 15:12:09 -05:00
Tib3rius c67909f21b Added ability to override unresolvable hosts failure.
Using --disable-sanity-checks will allow AutoRecon to run even if target(s) were unresolvable (one or more targets must be valid however).
Added a new plugin for ajp.
2022-11-29 12:04:15 -05:00
Tib3rius da718cea25 Fixed bug in enum4linux plugin.
Fixes #178
2022-11-04 15:45:07 -04:00
lapinou 08d8f7b27c
Added enum4linux-ng choice (#173)
* Added enum4linux-ng choice
* Update enum4linux.py

Co-authored-by: Tib3rius <48113936+Tib3rius@users.noreply.github.com>
2022-10-28 01:44:38 -04:00
Tib3rius f086edce34 Updated plugin check()
Return value of check() will deregister the plugin if it is False.
Updated several plugins which use check() to return False where appropriate.
Added "Report" class to protected classes.
2022-10-28 01:42:34 -04:00
Tib3rius 25050606c2
Update portscan-top-tcp-ports.py
Fixed missing import.
2022-10-27 10:58:11 -04:00
Tib3rius 406f6cba78 SMB Vuln Plugin Update
SMB Vuln plugin now runs all smb-vuln-* scripts in one command instead of only three in separate commands. This duplicates some work from the regular Nmap SMB scan but not too much. Manual command will only scan smb-vuln-* scripts that are marked as "dos".
2022-08-30 23:29:20 -04:00
Tib3rius ef53ebb01d Updated requirements and added check for WinRM
Since Nmap reports WinRM as HTTP, the port scan plugins now do a few additional checks on ports 5985 and 5986 to avoid running needless HTTP plugins if the services are just WinRM.

Updated the project dependencies to match.
2022-08-07 14:10:31 -04:00
Asim Aziz c2b6d9d232
Update ldap-search.py (#163)
* Update ldap-search.py

Hi Tib3rius
ldapsearch has updated syntax.
-h and -p have been Deprecated in favor of -H
New syntax is -H ldap://<IP>:<PORT>

* Version update.

Co-authored-by: Tib3rius <48113936+Tib3rius@users.noreply.github.com>
2022-05-25 23:28:04 -04:00
Tib3rius 48bea9d0d2 Update portscan-top-100-udp-ports.py
Allows for UDP scan to be run even if user is not root (edge case).
Fixes #145
2022-05-10 16:40:14 -04:00
Asim Aziz ac16397f68
Update ldap-search.py (#155)
Removed extra quotes after <password> in manual command
2022-04-23 02:19:23 -04:00
Asim Aziz f93bb30749
Update get-arch.py (#153)
correctly call getArch.py for default impacket installation on kali

Co-authored-by: Asim Aziz <41350723+chirisoft@users.noreply.github.com>
2022-04-23 02:17:46 -04:00
Rohit Kumar Ankam dc9b3af8e4
added recursive fuzzing with --dirbuster.recursive (#149)
Added recursive option for directory busting.

Co-authored-by: Tib3rius <48113936+Tib3rius@users.noreply.github.com>
2022-04-23 02:16:21 -04:00
Tib3rius a9e3a626ab Fixed bug.
Typo in onesixtyone.py plugin.
Fixes #146
2022-03-28 17:48:11 -04:00
Tib3rius 792c980e20 Fixed plugins.
Fixes #144
2022-03-24 01:49:16 -04:00
Tib3rius 4a98feee20 Updates to dirbuster plugin.
Removed gobuster's backup search.
Added extract link option to feroxbuster's manual command.
Removed recursion from dirsearch's manual command.
Removed silent mode from dirb's manual command.
2022-02-19 18:01:21 -05:00
Tib3rius ae0eb0629a Plugin Updates
Separated plugins out into separate files to make them easier to understand.
2022-02-14 22:15:20 -05:00
malet 5751f482f6
Enumeration of vhost should ignore TLS/SSL certificate errors (#139)
* Adding no tls certificate checking to gobuster vhost enumeration

* Updated version number.

Co-authored-by: malet <malet@invalid>
Co-authored-by: Tib3rius <48113936+Tib3rius@users.noreply.github.com>
2022-02-05 01:18:06 -05:00
Tib3rius f8d89966da Fixed / improved pattern matching.
{match} will output as the entire matched string. {match1} will output as the first matched group. {match2} etc.
2022-01-18 20:00:33 -05:00
Tib3rius 84adcb4836 Added GetArch plugin.
Resolves #138
2022-01-13 22:21:44 -05:00
Tib3rius 21ebcd1bbb Added wpscan API token.
Fixes #115
2022-01-13 21:17:48 -05:00
Tib3rius 4912a235ad I/O Updates, New Subdomain Enumeration Plugin
Plugins can now call info(), warn(), and error() functions from their service / target object which will properly prefix the plugin name, etc.
A new subdomain enumeration plugin using gobuster has been developed.
2022-01-13 18:33:45 -05:00
Tib3rius 873a1078d6 Fixed bug in rpcdump plugin.
impacket-rpcdump only supports ports 135, 139, 443, 445, and 593. Added a limitation to the plugin so it only runs against those ports.
2022-01-10 13:14:42 -05:00
Tib3rius 6fb3aff695 Added Virtual Host enumeration plugin. 2022-01-10 02:22:36 -05:00
Tib3rius 265970a9cc Update guess-port-scan.py
Fixed typo.
2022-01-09 20:39:30 -05:00
Tib3rius 43954a3f84 Added wordlist for dirbuster plugin.
AutoRecon will now create ~/.config/AutoRecon/wordlists dir and put the dirbuster.txt wordlist in it.
DirBuster plugin uses that wordlist by default.
2022-01-06 13:41:01 -05:00
Sebastian Hofmann 342b66d968
Added Missing qoutes (#136)
The actual version is causing an missing quotes issue. (dquote>)
2022-01-05 21:26:09 -05:00
gr4ysku11 1a2b9e9501
wrap post parameters in quotes (#133)
* wrap post parameters in quotes

* wrap params and message

similar to medusa right below it
2022-01-05 20:58:05 -05:00
Heino Sass Hallik 6c76b1fc8d
Add DnsRecon scans to default dns plugin (#119)
* add dnsrecon plugin

* Updated dnsrecon plugins.

Fixed a few formatting issues and typos.

Co-authored-by: Heino Sass Hallik <sass@rangeforce.com>
Co-authored-by: Tib3rius <48113936+Tib3rius@users.noreply.github.com>
2021-12-12 00:22:50 -05:00
Tim Bentley cfac135cc4
Fixes and New Scan feature (#128)
* fix issues and add function

* Fix smbclient

* Reverted some minor changes.

ffuf's -noninteractive flag does function. Unsure of why it was removed.
smbclient bug confirmed, but added -I back in and put // before the address since that appears to be the correct syntax.
Renamed CurlKnowSecurity to CurlKnownSecurity.

Co-authored-by: Tib3rius <48113936+Tib3rius@users.noreply.github.com>
2021-12-11 23:34:38 -05:00
Tib3rius ee3dc91668 Plugin updates.
Added an NTP nmap plugin.
Updated SIP plugin.
2021-10-06 11:49:11 -04:00
Tib3rius 0beb2ad7c1 Bug fixes.
Fixed bug in Curl Robots where file would get created despite no robots.txt existing.
Fixed bug where manual command exceptions would not get caught.
2021-09-30 13:43:55 -04:00
Tib3rius 5dc7630e0f Bug fixes.
Renamed the outdir variable back to output to avoid inconsistencies with config.
Renamed --targets to --target-file again for consistency.
2021-09-15 14:07:16 -04:00
Tib3rius 75df652bfd Reformatted code to be pip compatible. 2021-09-14 15:50:12 -04:00