The redjoust from kawaiipantsu

Mem Usage wrong in monitor

The monitor that shows CPU and MEM usage is showing wrong numbers for mem used.

Will be solved in #34

Make a iknowwhatyoudownload.com item lookup

I know that iknowwhatyoudownload.com requires API, so i will instead build a crawler and parse the site live. This will no doubt mean more work and things fail when ever they change up their site :) But it also means that i can keep the application from the need to etc share an api key or that the "user" suddenly is responsible for getting an API key in order for that item-lookup to work.

This is still just a "nice to have" idea.
Would obviously be a "passive" item under "IP target".

Lookup '`target`' SOA

Certificate Transparency (CT) Searching/Lookup item

I need to construct the last passive item module i need for the first beta test release. Then i need to move on to the active items.
But for now we need a CT lookup item.

I will try to make it so that at least it's showing the same as my recon-ct script.

DNS Information Recon (Deep dive)

Item condition criteria: Target must be a host/domain name
Item gather type: Passive

This is the task/issue for creating the "DNS Information Recon" item, that does a deep dive into osint dns info etc.
I have made a list of things that i want it to do out of the box, its a lot but again it all depends on how it's shown.

Attached files

DNS-Token-Fingerprints.txt

Overall "Recon Items" list for needed startup passive,active and redteam items

Ths is the overall list that we want to fufill before releaseing the first beta test client of Redjoust.
We want a few items in each category before we start up. Please remember we have 3 target types and 3 item types.
So if we list it as seen from item types then you need to provide what target types it supports

PASSIVE items

For now we start with a total of 5 passive items showing

DNS Deep-Dive ( #23 )
- Show on domain target
- Show on host-name target
Certificate Transparency (CT) Lookup ( #24 )
- Show on domain target
Whois
- Show on domain target
- Show on IP target

ACTIVE items

For now we start with a total of 4 active items showing

Simple service detector (port-scanning)
- Build up overview of each target and save result for them
- Show on host-name target
- Show on domain target
HTTP/Web Digger
- Available if sub-target port 80,443 found in service results (Not sure how this will work)
- Show on host-name target
- Show on domain target

REDTEAM items

For now we start with a total of 1 redteam items showing

Web Fuzz (Simple)
- Available if sub-target port 80,443 found in service results (Not sure how this will work)
- Show on host-name target
- Show on domain target

Target History (Max hist-target cleanup, wrong order)

When adding more than 50 (default) targets next time you start Redjoust it's supposed to clean up the history list of old targets.
Removing so there is only the last 50 targets saved. Obviously it should remove old-targets first :)

Behavior expected / Reproduce

Add "target 1"
Add 49 more
Add "target 51"
Expect on next startup that "target 1" is removed

Actual behavior

"target 51" is removed

Preferences windows (Make useful)

The current preferences window is not very useful, so far i have only made it so that it shows the users config file directly as it's loaded by the electron-storage module. We need to make the preferences page into an actual thing that can change the settings.

Task

It should be able to change all config options (that are use related)
Dynamically applied, no need for "apply/save"
Show what is default values
Extra things that might be cool
- Option to open config directly in editor for "advanced" operation
- Import / Export features

Crackfoo.net look up toolbox item

We need to have a toolbox lookup item for crackfoo.net. The do have an api interface but to keep the app free of api key settings for every e terns service for now I would rather have we parsed the results directly on the sites.

Included is example in such solution

curl -sX POST "http://crackfoo.net/?algo=$2" -d "hash=$1&sa=Search" | grep SUCCESS | awk '{print$9":"$13 }'

Fix code scanning alert - DOM text reinterpreted as HTML

Tracking issue for:

https://github.com/kawaiipantsu/redjoust/security/code-scanning/2

Make a abuseipdb.com item lookup

I know that abuseipdb.com requires API, so i will instead build a crawler and parse the site live. This will no doubt mean more work and things fail when ever they change up their site :) But it also means that i can keep the application from the need to etc share an api key or that the "user" suddenly is responsible for getting an API key in order for that item-lookup to work.

This is still just a "nice to have" idea.
Would obviously be a "passive" item under "IP target".

Fingerprinting vendor verification strings

This might be a long "task" as it's ever growing. All fingerprints i find along the way will be added here and once added to the JSON file with regexp, descriptions and a title it can be checked as done for each one. This list does not include the already 25 fingerprints i have added. So please before adding new string here, check if it's already in the file by doing a:

Want to contribute ? This is the file we are working on:
https://github.com/kawaiipantsu/redjoust/blob/dev/assets/json/online-service-provider-fingerprint.json

The steps to help:
Basically the task is to choose a verification-string from below and then do the following research:

Figure out who it belongs to
Figure out the specific service/product it belongs to
Figure out the simplest regex to uniqliy identify it
- 1. a test regexp
- 1. a match regexp (that matches the hash/data)
Use the JSON template and add it to the file :)

JSON Template for new fingerprint

{
    "fingerprintName": "<short 40-70chars detailed output string for fingerprint>",
    "inCategoeries": [0],
    "serviceProvider": {
        "name": "<company name>",
        "desc": "<company short info>",
        "url": "<company/product link>"
    },
    "serviceHash": {
        "original": "<verification string as seen in the wild/from the task list)>",
        "comment": "",
        "regexp": {
            "test": "/^<regexp-test>/i",
            "match": "/^<regexp-match (.+)>/i"
        }
    }
}

# To list all known test strings
cat online-service-provider-fingerprint.json | jq '.knownFingerprints[].serviceHash.regexp.test'

# To search for a specific string
cat online-service-provider-fingerprint.json | jq '.knownFingerprints[].serviceHash.regexp.test' | grep "string"

Vendor verification strings seen in the wild

This is the list of evergrowing strings seen in the wild that i would love to be able to fingerprint :)
So digg in !!

Fix code scanning alert - DOM text reinterpreted as HTML

Tracking issue for:

https://github.com/kawaiipantsu/redjoust/security/code-scanning/3

DNS Deep dive - Host fuzz broken shows "failed" on all hosts even "found"

So when running the deep dive on a target where i know that one of the fuzz words should resolve they are all marked as failed.
I did change something previously about string sanitizing related to injection. Maybe i did something or changed something.

But now when it resolves it's not getting the correct classes set.
Therefore breaking the functionality.

kawaiipantsu / redjoust Goto Github PK

redjoust's People

Contributors

Stargazers

Watchers

Forkers

redjoust's Issues