Search the Community

What is Osmedeus? Osmedeus allows you automated run the collection of awesome tools to reconnaissance and vulnerability scanning against the target. Feature Subdomain Scan. Subdomain TakeOver Scan. Screenshot the target. Basic recon like Whois, Dig info. Web Technology detection. IP Discovery. CORS Scan. SSL Scan. Wayback Machine Discovery. URL Discovery. Headers Scan. Port Scan. Vulnerable Scan. Seperate workspaces to store all scan output and details logging. REST API. React Web UI. Support Continuous Scan. Slack notifications. Easily view the report from the command line. Changelog v4.4 The default folder for workspaces has been updated to $HOME/workspaces-osmedeus/ from the previous location at $HOME/.osmedeus/workspaces/ The database has now been switched to a file-based system, making it simpler to transfer between machines. The user interface has undergone a revamp. Improvements in the performance of distributed scans. A new health check command has been included in the provider command, allowing you to monitor progress at a later time by leaving the instance open. Refactoring a lot of the helper messages throughout the tool [hide][Hidden Content]]

Automatic Reconnaissance and Scanning in Penetration Testing. What is Osmedeus? Osmedeus allows you automated run the collection of awesome tools to reconnaissance and vulnerability scanning against the target. Feature Subdomain Scan. Subdomain TakeOver Scan. Screenshot the target. Basic recon like Whois, Dig info. Web Technology detection. IP Discovery. CORS Scan. SSL Scan. Wayback Machine Discovery. URL Discovery. Headers Scan. Port Scan. Vulnerable Scan. Seperate workspaces to store all scan output and details logging. REST API. React Web UI. Support Continuous Scan. Slack notifications. Easily view the report from the command line. Changelog v4.1.1 Added a new clean-up script for public ffuf to show more beautiful output. Added a new workflow for testing notifications. Added a detailed notification setup page at docs.osmedeus.org/installation/notification/. Added a new tool str-replace to generate even more permutation subdomains (see probing module). [hide][Hidden Content]]

Ultimate Internet of Things/Industrial Control Systems reconnaissance tool. Requirements beautiful soup python3 django pynmea2 celery redis Shodan BinaryEdge WHOISXMLAPI Flickr Google Maps API pip3 install -r requirements.txt Make sure your API keys are correct and put them in keys.json in main directory. Run python3 manage.py makemigrations python3 manage.py migrate python3 manage.py runserver In a new window (in main directory) run celery worker celery worker -A kamerka --loglevel=info In a new window fire up redis redis-server And server should be available on hxxps://localhost:8000/ Search Search for Industrial Control Devices in specific country "All results" checkbox means get all results from Shodan, if it's turned off - only first page (100) results will be downloaded. "Own database" checkbox does not work but shows that is possible to integrate your own geolocation database. Let me know if you have access to better than Shodan's default one. Search for Internet of things in specific coordinates Type your coordinates in format "lat,lon", hardcoded radius is 20km. Dashboard Maps Los Angeles map Industrial Control Systems in Canada Device map & details Full list of supported devices with corresponding queries Known bugs: It's version 1.0 so please raise an issue if you think you found any bug or have an idea to make it better. Sometimes search page keeps the last values, so please use ctrl+shift+R to refresh the main search page Debug info is left on purpose for raising an issues still some problems with getting cves from shodan search results Flickr infowindow size Contribution I really care about feedback from you. If you have any idea how to make tool better, I'm more than happy to hear it. It's also possible to upload and host the tool online, if you want to help, dm me. TODO Live monitoring Offensive capabilities More devices More sources (Instagram?, Youtube?) Integration with Nmap and plcscan Extensive error checking/debugging Cleanup code, delete legacy/unused dependencies js, css files Keeping keys in db Your ideas More info && Download && Demo [Hidden Content]

What is Osmedeus? It allows you to do boring stuff in Pentesting automatically like reconnaissance and scanning the target by run the collection of awesome tools. Feature Subdomain Scan. Subdomain TakeOver Scan. Screenshot the target. Basic recon like Whois, Dig info. Web Technology detection. IP Discovery. CORS Scan. SSL Scan. Wayback Machine Discovery. URL Discovery. Headers Scan. Port Scan. Vulnerable Scan. Seperate workspaces to store all scan output and details logging. REST API. React Web UI. Support Continuous Scan. Slack notifications. Available modules with list tool being used Subdomain Scanning amass subfinder massdns Subdomain TakeOver Scanning subjack SubOver Screenshot the target aquatone EyeWitness Port Scanning masscan nmap Vulnerable Scan and beautify html report nmap-vulners nmap-bootstrap-xsl Git repo scanning truffleHog gitrob Doing some stuff with Burp State file sqlmap SleuthQL LinkFinder Directory search dirhunt dirsearch gobuster Bruteforce services brutespray Wordlists domain web-content Changelog v1.4 Adding new AssetFinding module powered mostly by tomnomnom. Direct mode (specific module) now very powerful Detail. Improve the API architecture, from now you can run multi targets without crash the routine. Improve main routine and add options for custom speed of the routine. Adding some security feature for the API. Improve search and sort from the UI. Fix a lot of bugs and refactoring a lot of things. [Hidden Content]

RecScanSec made for reconnaisance Scanner and information gathering with an emphasis on simplicity. It will do everything from. Features Information Security Headers WAF Analyzer Information Disclosure Banner Grabbing Url Crawl HTML Form Detector Port Scanner Get SSL Information Subdomain Enumeration Host Mapper Url Fuzzing & sensitive dir all results scanned will be saved in the output directory Requirements asyncio click requests colorlog bs4 tldextract [HIDE][Hidden Content]]

Recon-Tool made for reconnaissance and information gathering with an emphasis on simplicity. It will do everything from. Features Information Security Headers WAF Detector Banner Grabbing Phone Number Credit Card Number Email US Social Security Number Url Crawl Dom Paramter Url Internal Dynamic Paramter External Dynamic Paramter Internal Link External Link Port Scanner Subdomain Enumeration [HIDE][Hidden Content]]