用于红队成员初步快速攻击的全自动化工具。

Related tags

MiscellaneousJuD
Overview

关于

Author:m0sway
Mail:[email protected]
Github:https://www.github.com/m0sway/Jud

JuD是什么

JuD是一款自动化扫描器,其功能主要是遍历所有子域名、及遍历主机所有端口寻找出所有http服务,并使用集成的工具进行扫描,最后集成扫描报告;
工具目前有:oneforall、masscan、nmap、Wafw00f、rad、xray、ServerChan等

工作流程

  • 使用Oneforall遍历子域名
  • 遍历结束后,Server酱会发送提醒到WeChat
  • 使用masscan遍历主机所有开放端口
  • 使用nmap扫描开放端口;得出所有http服务端口
  • 使用Wafw00f进行WAF判断
  • 若无WAF,传递到rad
  • 使用rad进行扫描
  • 扫描到的URL传递到Xray
  • 使用Xray进行被动扫描
  • 扫描时发现漏洞Server酱会发送提醒到WeChat
  • 扫描结束后生成Xray报告
  • 每次项目的数据都会存入sqlite数据库,后续个人可查看

后续开发

后续还会加入FOFA的调用、dirsearch扫描目录等,优化代码,兼容Windows。

项目使用

项目是在Linux下开发的,请在Linux环境下使用。
rad扫描器是基于Chrome浏览器的,请先安装Chrome浏览器(若使用的时候报Chrome相关错误,打开Chrome的文件注释掉最后一行即可)。
接着将自己的Oneforall、Xray工具放入Tools中对应的文件夹(文件夹已经创建,将文件放入即可,不要套娃)
安装Oneforall所需Python库
配置文件在lib下的config.py,填入自己的server酱的key,其他相关配置也可做相应的更改。
全部安装完毕之后:
将目标填入 target.txt ,若是从ip开始扫描将目标填入 ip.txt ,若是直接扫描web将目标填入 task.txt 
启用命令: sudo python3 JuD.py  
可使用单个模块或者使用全自动模式。
扫描结果保存在results目录下,每次的扫描结果都会根据时间戳重命名。
结束时一定要使用工具中的退出选项,否则下次运行时会报错。

如有问题请提交Issues

2021/6/10 更新

更新了IP_SCAN表和TASK表的数据去重,避免多次扫描同一目标。 在全自动模式下注释了WAF判断(单模块依旧可以使用)。代码做了一些小优化。

2021/6/11 更新

新增了从IP开始全自动扫描 新增了从TASK开始全自动扫描

Owner
m0sway
m0sway
My qtile config with a fresh-looking bar and pywal support

QtileConfig My qtile config with a fresh-looking bar and pywal support. Note: This is my first rice and first github repo. Please excuse my poor codin

Eden 4 Nov 10, 2021
Used the pyautogui library to automate some processes on the computer

Pyautogui Utilizei a biblioteca pyautogui para automatizar alguns processos no c

Dheovani Xavier 1 Dec 30, 2021
Toppr Os Auto Class Joiner

Toppr Os Auto Class Joiner Toppr os is a irritating platform to work with especially for students it takes a while and is problematic most of the time

1 Dec 18, 2021
An animal facts python module

An animal facts python module

Fayas Noushad 3 Dec 19, 2021
Generate PNG filles from NFO files.

Installation git clone https://github.com/pcroland/nfopng cd nfopng pip install -r requirements.txt Usage ❯ ./nfopng.py usage: nfopng.py [-h] [-v] [-i

4 Jun 26, 2022
PyScaffold is a project generator for bootstrapping high quality Python packages

PyScaffold is a project generator for bootstrapping high quality Python packages, ready to be shared on PyPI and installable via pip. It is easy to use and encourages the adoption of the best tools a

PyScaffold 1.7k Jan 03, 2023
calculadora financiera hecha en python

Calculadora financiera Calculadora de factores financieros basicos, puede calcular tanto factores como expresiones algebraicas en funcion de dichos fa

crudo 5 Nov 10, 2021
NCAR/UCAR virtual Python Tutorial Seminar Series lesson on MetPy.

The Project Pythia Python Tutorial Seminar Series continues with a lesson on MetPy on Wednesday, 2 February 2022 at 1 PM Mountain Standard Time.

Project Pythia Tutorials 6 Oct 09, 2022
Headless - Wrapper around Ghidra's analyzeHeadless script

Wrapper around Ghidra's analyzeHeadless script, could be helpful to some? Don't tell me anything is wrong with it, it works on my machine.

8 Oct 29, 2022
A python package to manage the stored receiver-side Strain Green's Tensor (SGT) database of 3D background models and able to generate Green's function and synthetic waveform

A python package to manage the stored receiver-side Strain Green's Tensor (SGT) database of 3D background models and able to generate Green's function and synthetic waveform

Liang Ding 7 Dec 14, 2022
An Android app that runs Elm in a webview. And a Python script to build the app or install it on the device.

Requirements You need to have installed: the Android SDK Elm Python git Starting a project Clone this repo and cd into it: $ git clone https://github.

Benjamin Le Forestier 11 Mar 17, 2022
Awesome Casino is simple offline casino made on python.

Awesome-Casino Awesome Casino is simple offline casino made on python. I found bug, what can i do? If you find any bug or want to suggest any idea, al

Herman 1 Feb 04, 2022
This code makes the logs provided by Fiddler proxy of the Google Analytics events coming from iOS more readable.

GA-beautifier-iOS This code makes the logs provided by Fiddler proxy of the Google Analytics events coming from iOS more readable. To run it, create a

Rafael Machado 3 Feb 02, 2022
a pull switch (or BYO button) that gets you out of video calls, quick

zoomout a pull switch (or BYO button) that gets you out of video calls, quick. As seen on Twitter System compatibility Tested on macOS Catalina (10.15

Brian Moore 422 Dec 30, 2022
Repositório para estudo do airflow

airflow-101 Repositório para estudo do airflow Docker criado baseado no tutorial Exemplo de API da pokeapi Para executar clone o repo execute as confi

Gabriel (Gabu) Bellon 1 Nov 23, 2021
Necst-lib - Pure Python tools for NECST

necst-lib Pure Python tools for NECST. Features This library provides: something

NANTEN2 Group 5 Dec 15, 2022
The purpose of this script is to bypass disablefund, provide some useful information, and dig the hook function of PHP extension.

The purpose of this script is to bypass disablefund, provide some useful information, and dig the hook function of PHP extension.

Firebasky 14 Aug 02, 2021
A napari plugin to inspect data within a cisTEM project

napari-cistem A plugin to inspect data within a cisTEM project This napari plugin was generated with Cookiecutter using with @napari's cookiecutter-na

Johannes Elferich 1 Nov 07, 2021
A complex language with high level programming and moderate syntax.

zsq a complex language with high level programming and moderate syntax.

an aspirin 6 Jun 25, 2022
Find your desired product in Digikala using this app.

Digikala Search Find your desired product in Digikala using this app. با این برنامه محصول مورد نظر خود را در دیجیکالا پیدا کنید. About me Full name: M

Matin Ardestani 17 Sep 15, 2022