lucifer1993 / satansword

红队综合渗透框架

SatanSword

红队综合渗透框架

>>>Docker使用

• 1.拉取镜像 docker pull satansword/satansword
• 2.执行命令 docker run -ti satansword/satansword /bin/bash -c "service mariadb start && python3 /root/SatanSword/SatanSword.py"

>>>功能描述

• web指纹识别，集成whatweb及wappalyzer所有指纹及自己收集的web服务器指纹1839条+cms指纹1936条。

• 漏洞PoC检测，提供1000+PoC检测脚本内置在数据库中，同时支持漏洞查询和代码查看及一键批量检测功能。

• 批量web信息和端口信息查询，web信息包括headers，whois，dig，CDN检测，指纹检测，IP位置检测。端口扫描使用masscan+nmap探测常用端口指纹服务。

• 路径扫描，集成dirsearch的路径字典，通过GET和HEAD两种方法实现。

• 批量JS查找子域名，参考某大佬写的脚本直接拿过来改了一下，后面会贴上地址链接。

• 协程支持。

• 使用google headless，更精准的XSS检测。

• 完整的日志回溯。

>>>环境设置

• 安装python3+模块+系统命令+配置api文件

修改conf/config.py，在对应的参数中填入自己辅助接口的信息

• 新建mysql数据库名“SatanSword”，导入Heaven_Hell/backuptables路径下面的所有SQL文件

• 保证下载的chromedriver和chromium版本一致

>>>使用说明

• 设置或取消线程数、cookies

• 对多个目标执行多个POC

• 所有成功和失败的利用都会写入数据库和日志文件

• CMS指纹识别

• web和ip信息识别，sniper用于单一IP或URL，批量请使用bomber，结果自动保存到数据库中

• JS文件批量检索子域名

>>>感谢如下优秀开源项目

https://github.com/nmap/nmap

https://github.com/robertdavidgraham/masscan

https://github.com/knownsec/pocsuite3

https://github.com/Threezh1/JSFinder

https://github.com/urbanadventurer/WhatWeb

https://github.com/chorsley/python-Wappalyzer

>>>特别说明

1.本项目中的所有PoC代码全部转移到 https://github.com/Lucifer1993/PoCHub ，提供json和sql两种文件格式。

2.请遵守《中华人民共和国网络安全法》，禁止将代码用于未授权测试及破坏行为。

satansword's Issues

conf/config.py中的self.redirect是什么？

url和key是从哪里获得的?

输入sudo pip3 install -r SatanSword.py 时报错

ERROR: Invalid requirement: 'from gevent import monkey' (from line 5 of SatanSword.py)
Python版本为3.7.4，已经查阅网上相关报错解决方式，暂无法解决，是否因为Python版本过低造成？如何解决，求救

建议整个容器版本，方便部署

RT

数据库已配置，执行命令均报错Nonetype

SatanSword⚡=>>> status
EXCEPTION of type 'TypeError' occurred with message: ''NoneType' object is not subscriptable'
To enable full traceback, run the following command: 'set debug true'
SatanSword⚡=>>> search phpcms
EXCEPTION of type 'TypeError' occurred with message: ''NoneType' object is not iterable'
To enable full traceback, run the following command: 'set debug true'
SatanSword⚡=>>

缺少Python模块: gnureadline

pip3 install gnureadline报错error: command 'x86_64-linux-gnu-gcc' failed with exit status 1

Beginning configuration for readline-8.0 for x86_64-pc-linux-gnu

checking whether make sets $(MAKE)... yes
checking for gcc... no
checking for cc... no
checking for cl.exe... no
configure: error: in `/tmp/pip-install-pcxjwsss/gnureadline/rl/readline-lib':
configure: error: no acceptable C compiler found in $PATH
See `config.log' for more details

============ Building the readline extension module ============

running install
running build
running build_py
creating build
creating build/lib.linux-x86_64-3.8
copying readline.py -> build/lib.linux-x86_64-3.8
running egg_info
writing gnureadline.egg-info/PKG-INFO
writing dependency_links to gnureadline.egg-info/dependency_links.txt
writing top-level names to gnureadline.egg-info/top_level.txt
reading manifest file 'gnureadline.egg-info/SOURCES.txt'
reading manifest template 'MANIFEST.in'
warning: no files found matching 'readline*-0*' under directory 'rl'
writing manifest file 'gnureadline.egg-info/SOURCES.txt'
running build_ext
building 'gnureadline' extension
creating build/temp.linux-x86_64-3.8
creating build/temp.linux-x86_64-3.8/Modules
creating build/temp.linux-x86_64-3.8/Modules/3.x
x86_64-linux-gnu-gcc -pthread -Wno-unused-result -Wsign-compare -DNDEBUG -g -fwrapv -O2 -Wall -g -fstack-protector-strong -Wformat -Werror=format-security -g -fwrapv -O2 -g -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -fPIC -DHAVE_RL_APPEND_HISTORY -DHAVE_RL_CALLBACK -DHAVE_RL_CATCH_SIGNAL -DHAVE_RL_COMPLETION_APPEND_CHARACTER -DHAVE_RL_COMPLETION_DISPLAY_MATCHES_HOOK -DHAVE_RL_COMPLETION_MATCHES -DHAVE_RL_COMPLETION_SUPPRESS_APPEND -DHAVE_RL_PRE_INPUT_HOOK -DHAVE_RL_RESIZE_TERMINAL -I. -I/usr/include/python3.8 -c Modules/3.x/readline.c -o build/temp.linux-x86_64-3.8/Modules/3.x/readline.o
unable to execute 'x86_64-linux-gnu-gcc': No such file or directory
error: command 'x86_64-linux-gnu-gcc' failed with exit status 1
----------------------------------------

ERROR: Command errored out with exit status 1: /usr/bin/python3 -u -c 'import sys, setuptools, tokenize; sys.argv[0] = '"'"'/tmp/pip-install-pcxjwsss/gnureadline/setup.py'"'"'; file='"'"'/tmp/pip-install-pcxjwsss/gnureadline/setup.py'"'"';f=getattr(tokenize, '"'"'open'"'"', open)(file);code=f.read().replace('"'"'\r\n'"'"', '"'"'\n'"'"');f.close();exec(compile(code, file, '"'"'exec'"'"'))' install --record /tmp/pip-record-wudwyris/install-record.txt --single-version-externally-managed --compile --install-headers /usr/local/include/python3.8/gnureadline Check the logs for full command output.
root@bbkali:~/SatanSword# error: command 'x86_64-linux-gnu-gcc' failed with exit

数据库导入Heaven_Hell/backuptables路径下面的所有SQL文件出错