devops必备，全自动侦察和漏洞扫描工具

git地址：https://github.com/j3ssie/Osmedeus

Osmedeus 是用于侦察和漏洞扫描的全自动安全工具，可以自动运行工具集，以便针对目标进行侦察和漏洞扫描。

特点：

• 子域名扫描
• 子域名接管扫描
• 对目标截图
• Web 技术检测
• IP Discovery
• CORS 扫描
• SSL 扫描
• Wayback Machine Discovery
• URL Discovery
• Headers Scan
• 端口扫描
• 漏洞扫描
• 分隔工作区以存储所有扫描输出和详细信息日志记录
• REST API
• React Web UI
• 支持 Continuous 扫描
• Slack notifications

Example Commands

# normal routine
./osmedeus.py -t example.com
# normal routine but slow speed on subdomain module
./osmedeus.py -t example.com --slow 'subdomain'
# direct mode examples
./osmedeus.py -m portscan -i "1.2.3.4/24"
./osmedeus.py -m portscan -I list_of_targets.txt -t result_folder
./osmedeus.py -m "portscan,vulnscan" -i "1.2.3.4/24" -t result_folder
./osmedeus.py -m "assets" -i "example.com"
./osmedeus.py -m "assets,dirb" -i "example.com"
# report mode
./osemdeus.py -t example.com --report list
./osemdeus.py -t example.com --report sum
./osemdeus.py -t example.com -m subdomain --report short
./osemdeus.py -t example.com -m "subdomain, portscan" --report full

More options

Basic Usage
===========
python3 osmedeus.py -t <your_target>
python3 osmedeus.py -T <list_of_targets>
python3 osmedeus.py -m <module> [-i <input>|-I <input_file>] [-t workspace_name]
python3 osmedeus.py --report <mode> -t <workspace> [-m <module>]
Advanced Usage
==============
[*] List all module
python3 osmedeus.py -M
[*] List all report mode
python3 osmedeus.py --report help
[*] Running with specific module
python3 osmedeus.py -t <result_folder> -m <module_name> -i <your_target>
[*] Example command
python3 osmedeus.py -m subdomain -t example.com
python3 osmedeus.py -t example.com --slow "subdomain"
python3 osmedeus.py -t sample2 -m vuln -i hosts.txt
python3 osmedeus.py -t sample2 -m dirb -i /tmp/list_of_hosts.txt
Remote Options
==============
--remote REMOTE Remote address for API, (default: https://127.0.0.1:5000)
--auth AUTH Specify authentication e.g: --auth="username:password"
 See your config file for more detail (default: core/config.conf)
--client just run client stuff in case you ran the flask server before
More options
==============
--update Update lastest from git
-c CONFIG, --config CONFIG
 Specify config file (default: core/config.conf)
-w WORKSPACE, --workspace WORKSPACE
 Custom workspace folder
-f, --force force to run the module again if output exists
-s, --slow "all"
 All module running as slow mode
-s, --slow "subdomain"
 Only running slow mode in subdomain module
--debug Just for debug purpose