Софт Sifter

Zer0must2b сказал(а):

Sifter - сканер ошибок, разведок и уязвимостей. Он объединяет множество инструментов в разных наборах модулей для быстрого выполнения задач восстановления, проверки сетевого брандмауэра, перечисления удаленных и локальных хостов и сканирования на наличие «blue» уязвимостей в микросфте и, если они не исправлены, их использования. Он использует такие инструменты, как blackwidow и konan для перечисления webdir и быстрого нанесения картографических данных с помощью ASM.

Посмотреть вложение 41554


s1l3nt78
Потому что первый шаг, это перечисление

Собранная информация сохраняется в папке результатов, эти выходные файлы могут быть легко проанализированы в TigerShark для использования в вашей кампании. Или составлен для окончательного отчета, чтобы завершить тест на проникновение.

Последнюю версию можно скачать здесь.
Более старые версии можно найти здесь.

Если сканирование не работает, пожалуйста, введите цель без http://

например. target.com
вместо http://target.com

Установка:

Код:

* This will download and install all required tools
*
$ git clone https://github.com/s1l3nt78/sifter.git
$ cd sifter
$ chmod +x install.sh
$ ./install.sh

Меню:
Посмотреть вложение 41555

Модули:

Код:

# Information Modules
  = Enterprise Information Gatherers
      -theHarvester  - https://github.com/laramies/theHarvester
      -Osmedeus - https://github.com/j3ssie/Osmedeus
      -ReconSpider - https://github.com/bhavsec/reconspider
      -CredNinja - -CredNinja - https://github.com/Raikia/CredNinja

= Targeted Information Gatherers
      -Maryam - https://github.com/saeeddhqan/Maryam
      -Seeker - https://github.com/thewhiteh4t/seeker
      -Sherlock - https://github.com/sherlock-project/sherlock
      -xRay - https://github.com/evilsocket/xray

# Domain Recon Gathering
    -DnsTwist - https://github.com/elceef/dnstwist
    -Armory - https://github.com/depthsecurity/armory
    -SayDog - https://github.com/saydog/saydog-framework

# Exploitation Tools
  = MS Exploiters
      -ActiveReign - https://github.com/m8r0wn/ActiveReign
      -iSpy - https://github.com/Cyb0r9/ispy
      -SMBGhost - https://github.com/gabimarti/SMBScanner

  = Website Exploiters
      -DDoS
        --- Dark Star - https://github.com/s1l3nt78/Dark-Star
        --- Impulse - https://github.com/LimerBoy/Impulse
      -NekoBot - https://github.com/tegal1337/NekoBotV1
      -xShock - https://github.com/capture0x/XSHOCK
      -VulnX - https://github.com/anouarbensaad/vulnx

= Exploit Searching
      -FindSploit - https://github.com/1N3/Findsploit
      -ShodanSploit - https://github.com/shodansploit/shodansploit

-TigerShark (Phishing) - https://github.com/s1l3nt78/TigerShark

    = Post-Exploitation
         -EoP Exploit (Elevation of Priviledge Exploit) - https://github.com/padovah4ck/CVE-2020-0683
         -Omega - https://github.com/entynetproject/omega
        -WinPwn - https://github.com/S3cur3Th1sSh1t/WinPwn
      -CredHarvester - https://github.com/Technowlogy-Pushpender/creds_harvester
      -PowerSharp - https://github.com/S3cur3Th1sSh1t/PowerSharpPack
     
   
    = FuzzyDander - Equation Group, Courtesy of the Shadow Brokers
        (Obtained through issue request.)
         -FuzzBunch
      -Danderspritz

    = BruteDUM (Bruteforcer) - https://github.com/GitHackTools/BruteDum

# Password Tools
    -Mentalist - https://github.com/sc0tfree/mentalist
    -DCipher - https://github.com/k4m4/dcipher

# Network Scanners
    -Nmap - https://nmap.org
    -AttackSurfaceMapper - https://github.com/superhedgy/AttackSurfaceMapper
    -aSnip - https://github.com/harleo/asnip
    -wafw00f - https://github.com/EnableSecurity/wafw00f
    -Arp-Scan

# HoneyPot Detection Systems
    -HoneyCaught - https://github.com/aswinmguptha/HoneyCaught
    -SniffingBear - https://github.com/MrSuicideParrot/SniffingBear
    -HoneyTel (telnet-iot-honeypot) - https://github.com/Phype/telnet-iot-honeypot


# Vulnerability Scanners
    -Flan - https://github.com/cloudflare/flan
      -Rapidscan - https://github.com/skavngr/rapidscan
    -Yuki-Chan - https://github.com/Yukinoshita47/Yuki-Chan-The-Auto-Pentest


# WebApplication Scanners
      -Sitadel - https://github.com/shenril/Sitadel
      -OneFind - https://github.com/nyxgeek/onedrive_user_enum
      -AapFinder - https://github.com/Technowlogy-Pushpender/aapfinder
      -BFAC - https://github.com/mazen160/bfac


# Website Scanners & Enumerators
      -Nikto - https://github.com/sullo/nikto
      -Blackwidow - https://github.com/1N3/blackwidow
      -Wordpress
          --- WPScan - https://github.com/wpscanteam/wpscan
          ---- WPForce / Yertle - https://github.com/n00py/WPForce
      -Zeus-Scanner - https://github.com/Ekultek/Zeus-Scanner
      -Dirb
      -DorksEye - https://github.com/BullsEye0/dorks-eye

Help menu:

Код:

 $ sifter runs programs,
cli calling menus
$ sifter -c will check existing hosts in the host list $ sifter -a 'target-ip' add the hostname / IP to the host file
$ sifter -m Opens the main module menu
$ sifter -e Opens exploitation modules.
$ sifter -i Opens a module menu based on information.
$ sifter -d Opens domain-oriented modules.
$ sifter -n Opens the network mapping module menu.
$ sifter -w Opens website-targeted modules
$ sifter. -wa Opens the focused web application module menu
$ sifter -v Opens the vulnerability scan module menu
$ sifter -r Opens the results folder for easy viewing of all saved results.
$ sifter -u Checks / installs updates
$ sifter -h This is the help menu
[/ CODE]
[/ QUOTE]


The [B][I][U]one[/U][/I][/B] who shared this post, email me at s1l3n7h0s7@gmail.com 
And i will provide the [B][U][I]FuzzyDander[/I][/U][/B] module

Нажмите, чтобы раскрыть...

Vertigo сказал(а):

Brother, it won't work. Of course, Respect for the review (always write the authors of the scripts, make links to their resources, but the name must be whoever developed the script, etc.)
This is correct if you review the tool.
Well, with all due respect, honestly. You're done, you're trying.
In the second topic, the software developer that you write about is unsubscribed to you.
And in response, some kind of concrete wall.)) No need to get lost, you need to say.
Why not just thank him? Developers hope for feedback, they are pleased that they write, respond, use about their tools.
Yes, it's usually foreigners. Do not be afraid of this.
On-line translators are always at hand. You don't need to build complex phrases if the problems with the language are better than simple and understandable.
You don't have to write “Bro” there when handling, if you're not sure. Here you can, I'll tell you right away.
This will not work with the Chinese (it's better to ask me in drugs)).
We have an international forum, so we respond in the language in which we were contacted.
This is not the case when I tested the TIDOS-framework tool, when it was in development and the author personally thanked me and the Forum.
The tool entered the pantheon of the best things to test when we fixed errors, etc.
Here everything is simpler and is built on the same Respect.
I wrote a review, the author of the script went in, answered.
Don't be afraid, Bro, for that, on the contrary, they are respected.

Нажмите, чтобы раскрыть...

security notice сказал(а):

Due to language translation I am a little confused by this post ...
Id like to say thank you if you liked my program (sifter), and in terms of the programs within I have made correct links to all the original repositories to give the
original developers of the tools their credit. I in no way make claims for anything inside of sifter that isnt mine as I would not want it done to me.
Anyway, I do hope that this tool has been able to provide people some ease and timiousness while performing OSINT and recon gathering tasks.
i am s1l3nt78 by the way.
Just as i am a native english speaker before i really knew anything about this site - i used a different alias

Нажмите, чтобы раскрыть...

Vertigo сказал(а):

Oh, no.My words were addressed Zer0must2b.
I'm sorry that my post confused You, and You thought it was about You.
I gave advice Zer0must2b so that it responds to the authors of tools that come to the forum.
And I gave an example when I wrote a review on Tidos-framework and how well we communicated with the author.
Just told the Zer0must2b about a good tradition not to be silent and say thank you to the author when the author personally visited the review page
We are always pleased when software authors pay attention to people who write reviews about tools.
So don't think badly.
I know that your Sifter wonderful framework.
And this is a long and beautiful job.

Нажмите, чтобы раскрыть...