Commit Graph

281 Commits

Author SHA1 Message Date
Sourcery AI 929bb456ec 'Refactored by Sourcery' 2023-10-02 15:43:23 +00:00
Asim Aziz 1160474b23
smbmap commandline changes (#208)
* Update ldap-search.py

Removed extra quotes after <password> in manual command

* Update ldap-search.py

Hi Tib3rius
ldapsearch has updated syntax.
-h and -p have been Deprecated in favor of -H
New syntax is -H ldap://<IP>:<PORT>

* Update smbmap.py

Some command line arguments have changed since the update to smbmap.
2023-09-03 18:03:46 -04:00
Tib3rius 75844760b0 Spelling correction & version update. 2023-09-03 18:03:26 -04:00
Tib3rius b2f5c9d6cb
Update lint_python.yml
codespell can't see the backslash in "Couldn\'t" for some stupid reason.
2023-09-03 17:33:26 -04:00
wfleisher b4567a287e
Created Dockerfile (#189) 2023-02-27 18:29:38 -05:00
Tib3rius 918f9b900f Bug fix.
Fixes a "flaw" in ffuf where a fuzzed virtual host may not be discovered due to non-standard error status codes being used (e.g. if SNI is in play).
2023-02-27 18:01:07 -05:00
Tib3rius f55b17e7db
Update lint_python.yml 2023-02-21 19:31:41 -05:00
Tib3rius e8264ebe35
Update lint_python.yml
Seeing if upgrading the actions will fix the safety check issue.
2023-02-21 14:44:51 -05:00
Tib3rius a9608d663d Bug fixes and updates.
Fixed bug in dirbuster and vhost-enum plugins. Redirections are now followed. This could potentially cause issues down the line but for now it seems to work.
Have re-enabled nikto as an auto-run plugin, however several constraints are in place to ensure it doesn't take too long.
2023-02-19 17:16:27 -05:00
Tib3rius 9cfbc4a7ce Update main.py
Potential fix for #187
2023-01-16 00:42:52 -05:00
Tib3rius 851ffbd316 Plugin updates, bug fix, and feature update.
A few manual plugin updates (command formatting etc.)
Fixed bug where processes were left running after AutoRecon is cancelled and/or times out.
Status messages now include PIDs of running processes if verbosity >= 2.

Closes #183
Fixes #184
2023-01-10 16:24:14 -05:00
Tib3rius 65fc104b2d Updates & bug fixes.
Plugins & wordlists are now stored in ~/.local/share/AutoRecon.
Default config / global config files are still stored in ~/.config/AutoRecon.
Removed feature which used the cwd's config.toml, global.toml, and plugins dir if detected.
Fixed bug which wouldn't generate combined reports in some cases.
2022-12-07 15:12:09 -05:00
Tib3rius c67909f21b Added ability to override unresolvable hosts failure.
Using --disable-sanity-checks will allow AutoRecon to run even if target(s) were unresolvable (one or more targets must be valid however).
Added a new plugin for ajp.
2022-11-29 12:04:15 -05:00
Tib3rius da718cea25 Fixed bug in enum4linux plugin.
Fixes #178
2022-11-04 15:45:07 -04:00
lapinou 08d8f7b27c
Added enum4linux-ng choice (#173)
* Added enum4linux-ng choice
* Update enum4linux.py

Co-authored-by: Tib3rius <48113936+Tib3rius@users.noreply.github.com>
2022-10-28 01:44:38 -04:00
Tib3rius f086edce34 Updated plugin check()
Return value of check() will deregister the plugin if it is False.
Updated several plugins which use check() to return False where appropriate.
Added "Report" class to protected classes.
2022-10-28 01:42:34 -04:00
Tib3rius 25050606c2
Update portscan-top-tcp-ports.py
Fixed missing import.
2022-10-27 10:58:11 -04:00
Tib3rius 8ee03c2dc1
Update lint_python.yml 2022-10-27 10:56:00 -04:00
Tib3rius 406f6cba78 SMB Vuln Plugin Update
SMB Vuln plugin now runs all smb-vuln-* scripts in one command instead of only three in separate commands. This duplicates some work from the regular Nmap SMB scan but not too much. Manual command will only scan smb-vuln-* scripts that are marked as "dos".
2022-08-30 23:29:20 -04:00
Tib3rius b41ad27548 Merge branch 'main' of https://github.com/Tib3rius/AutoRecon 2022-08-07 14:13:55 -04:00
Tib3rius 283b17bcd1 Version update. 2022-08-07 14:13:41 -04:00
NalZE7 3313968a2b
Adding dnsrecon to packages list that should be installed (#166) 2022-08-07 14:11:11 -04:00
Tib3rius ef53ebb01d Updated requirements and added check for WinRM
Since Nmap reports WinRM as HTTP, the port scan plugins now do a few additional checks on ports 5985 and 5986 to avoid running needless HTTP plugins if the services are just WinRM.

Updated the project dependencies to match.
2022-08-07 14:10:31 -04:00
Tib3rius 28521f6e00 get_option() update
The plugin function get_option() now has an optional default value which is returned in the event that no option was provided (either by the plugin as a default when creating the option, or by the end user).
2022-06-12 16:22:20 -04:00
Tib3rius f724be8191 Updated service exceptions list. 2022-05-28 23:40:21 -04:00
Asim Aziz c2b6d9d232
Update ldap-search.py (#163)
* Update ldap-search.py

Hi Tib3rius
ldapsearch has updated syntax.
-h and -p have been Deprecated in favor of -H
New syntax is -H ldap://<IP>:<PORT>

* Version update.

Co-authored-by: Tib3rius <48113936+Tib3rius@users.noreply.github.com>
2022-05-25 23:28:04 -04:00
Tib3rius f1620806b2 Update main.py
Fix for updating default plugin arguments from config file.
2022-05-22 19:05:04 -04:00
Tib3rius fec09fb591 Version update. 2022-05-10 16:41:53 -04:00
Tib3rius 48bea9d0d2 Update portscan-top-100-udp-ports.py
Allows for UDP scan to be run even if user is not root (edge case).
Fixes #145
2022-05-10 16:40:14 -04:00
Tib3rius f82a9a7005
Update README.md 2022-05-09 11:59:30 -04:00
Tib3rius a7b7128cd2 Merge branch 'main' of https://github.com/Tib3rius/AutoRecon 2022-04-23 02:32:35 -04:00
Tib3rius 4cd6183e6c Version update. 2022-04-23 02:32:25 -04:00
Asim Aziz ac16397f68
Update ldap-search.py (#155)
Removed extra quotes after <password> in manual command
2022-04-23 02:19:23 -04:00
Asim Aziz f93bb30749
Update get-arch.py (#153)
correctly call getArch.py for default impacket installation on kali

Co-authored-by: Asim Aziz <41350723+chirisoft@users.noreply.github.com>
2022-04-23 02:17:46 -04:00
Rohit Kumar Ankam dc9b3af8e4
added recursive fuzzing with --dirbuster.recursive (#149)
Added recursive option for directory busting.

Co-authored-by: Tib3rius <48113936+Tib3rius@users.noreply.github.com>
2022-04-23 02:16:21 -04:00
Tib3rius dadfc9b300 Version update.,
Version update.,
2022-04-18 06:54:24 -04:00
Tib3rius 0410fa2477 Update main.py
Bug fix.
2022-04-18 06:53:06 -04:00
Tib3rius 9d3e2e684c Update main.py
Potential fix for imports.
2022-04-10 01:34:11 -04:00
Tib3rius a9e3a626ab Fixed bug.
Typo in onesixtyone.py plugin.
Fixes #146
2022-03-28 17:48:11 -04:00
Tib3rius 792c980e20 Fixed plugins.
Fixes #144
2022-03-24 01:49:16 -04:00
Tib3rius 4a98feee20 Updates to dirbuster plugin.
Removed gobuster's backup search.
Added extract link option to feroxbuster's manual command.
Removed recursion from dirsearch's manual command.
Removed silent mode from dirb's manual command.
2022-02-19 18:01:21 -05:00
Tib3rius ae0eb0629a Plugin Updates
Separated plugins out into separate files to make them easier to understand.
2022-02-14 22:15:20 -05:00
Tib3rius 0e27e3b1c4 Update dirbuster.txt
Removed some entries from dirbuster.txt
2022-02-08 22:45:46 -05:00
malet 5751f482f6
Enumeration of vhost should ignore TLS/SSL certificate errors (#139)
* Adding no tls certificate checking to gobuster vhost enumeration

* Updated version number.

Co-authored-by: malet <malet@invalid>
Co-authored-by: Tib3rius <48113936+Tib3rius@users.noreply.github.com>
2022-02-05 01:18:06 -05:00
Tib3rius 906493da39 Added max plugin instance control.
-mpti / --max-plugin-target-instances can be used to control the number of instances of a plugin that can run concurrently per target.
-mpgi / --max-plugin-global-instances can be used to control the number of instances of a plugin that can run concurrently (globally).
2022-02-05 01:06:33 -05:00
Tib3rius f8d89966da Fixed / improved pattern matching.
{match} will output as the entire matched string. {match1} will output as the first matched group. {match2} etc.
2022-01-18 20:00:33 -05:00
Tib3rius 84adcb4836 Added GetArch plugin.
Resolves #138
2022-01-13 22:21:44 -05:00
Tib3rius 21ebcd1bbb Added wpscan API token.
Fixes #115
2022-01-13 21:17:48 -05:00
Tib3rius 4912a235ad I/O Updates, New Subdomain Enumeration Plugin
Plugins can now call info(), warn(), and error() functions from their service / target object which will properly prefix the plugin name, etc.
A new subdomain enumeration plugin using gobuster has been developed.
2022-01-13 18:33:45 -05:00
Tib3rius fbe3fb48c3 Update README.md
Fixes #137
2022-01-13 00:45:11 -05:00