dutchcoders / ares Goto Github PK
View Code? Open in Web Editor NEWPhishing toolkit for red teams and pentesters.
License: Apache License 2.0
Phishing toolkit for red teams and pentesters.
License: Apache License 2.0
Implement a multi user system that allows several users to work together on a campaign, with audit logs.
Select, import, and configure injects.
GUI management for running concurrent campaigns.
Allow for the hosting of multiple mirrored domains in the same instance of Ares.
For example en.wikipedia.org is on a different domain from de.wikipedia.org, being able to mirror both would decrease the chance of the mirror being noticed, and increase the reach of Ares.
How to reproduce
Browse with a http/2.0 supported browser to an Ares site. It will fail with the following error on the console.
io: read/write on closed pipe
Workaround
Currently we can workaround this issue by disabling http/2.0 support.
GODEBUG=http2server=0 ares
When attempting to run ares it errors out and shows a stack trace
panic: no reachable servers
goroutine 1 [running]: github.com/dutchcoders/ares/server.New(0xc42017bca0, 0x3, 0x3, 0x0) /home/evan/go/src/github.com/dutchcoders/ares/server/proxy.go:101 +0x381 github.com/dutchcoders/ares/cmd.New.func2(0xc420020dc0) /home/evan/go/src/github.com/dutchcoders/ares/cmd/cmd.go:101 +0x173 github.com/dutchcoders/ares/vendor/github.com/minio/cli.HandleAction(0x9c7440, 0xaf6f00, 0xc420020dc0, 0xc42006a7e0, 0x0) /home/evan/go/src/github.com/dutchcoders/ares/vendor/github.com/minio/cli/app.go:499 +0x7c github.com/dutchcoders/ares/vendor/github.com/minio/cli.(*App).Run(0xc4200b9380, 0xc42001e090, 0x3, 0x3, 0x0, 0x0) /home/evan/go/src/github.com/dutchcoders/ares/vendor/github.com/minio/cli/app.go:269 +0x64e github.com/dutchcoders/ares/vendor/github.com/minio/cli.(*App).RunAndExitOnError(0xc4200b9380) /home/evan/go/src/github.com/dutchcoders/ares/vendor/github.com/minio/cli/app.go:281 +0x53 main.main() /home/evan/go/src/github.com/dutchcoders/ares/main.go:9 +0x32
The trace shows the error originates on line 101 of proxy.go. Which is related to connecting to a MongoDB database. To verify this I compared the references of mongodb_url to elasticsearch_url:
ES:
ares/server/config.go: ElasticsearchURL string toml:"elasticsearch_url" ares/server/indexer.go: u, err := url.Parse(p.ElasticsearchURL) ares/server/proxy.go: if c.ElasticsearchURL != "" {
Mongo:
ares/server/config.go: MongoURL string toml:"mongodb_uri" ares/server/proxy.go: if db, err := database.Open(p.config.MongoURL); err != nil {
It seems that the mongodb_url is not verified as existing compared to elasticsearch_url
Add a (daily/weekly) reporting function that sends an e-mail with some management friendly graphs, and information.
easy to replicate, just do exactly as teh README.md tells you to do
first get the config
wget -q https://github.com/dutchcoders/ares/raw/master/config.toml.sample -O config.toml
then copy/paste the command into a terminal and run it
docker run -d -p 8080:8080 --name ares -v $(pwd)/config.toml:/etc/ares.toml dutchcoders/ares
Unable to find image 'dutchcoders/ares:latest' locally
docker: Error response from daemon: pull access denied for dutchcoders/ares, repository does not exist or may require 'docker login': denied: requested access to the resource is denied.
See 'docker run --help'.
You change the name or something??
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.