Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dev #841

Merged
merged 33 commits into from
Mar 2, 2024
Merged

Dev #841

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
33 commits
Select commit Hold shift + click to select a range
8a277bf
Add multi custom functions
rt-bast Feb 7, 2024
4b65306
Several patches for bash script, needed by the trap error function
rt-bast Feb 8, 2024
4e85fa6
Merge branch 'six2dez:main' into main
rt-bast Feb 8, 2024
c8b30e0
Add date into logs and notifications
rt-bast Feb 8, 2024
dff4ead
Typo error
rt-bast Feb 8, 2024
b1e4ee7
Another typo error
rt-bast Feb 8, 2024
6e99a58
nuclei format json online
rt-bast Feb 8, 2024
91ad8b8
Adjust axim functions when fleet is empty
rt-bast Feb 8, 2024
7cddba2
Add AXIOM_POST_START inialization
rt-bast Feb 8, 2024
756c032
add .called_fn dir
rt-bast Feb 8, 2024
1355733
correct dir path
rt-bast Feb 8, 2024
075a551
double error log
rt-bast Feb 8, 2024
245e124
add info level log when axiom fleet is ready
rt-bast Feb 8, 2024
cd9ec5f
parallelize custom actions
rt-bast Feb 8, 2024
1c27654
correct custom function list
rt-bast Feb 8, 2024
f037950
Correct dir path
rt-bast Feb 8, 2024
1d819ff
trap error
rt-bast Feb 8, 2024
ac83b3a
Simplify notification
rt-bast Feb 8, 2024
d58b96d
Correct ARG
rt-bast Feb 8, 2024
b5dae2b
var name error
rt-bast Feb 8, 2024
3cafa8c
another var name error
rt-bast Feb 8, 2024
f961b8b
Add axiom configure into Dockerfile
rt-bast Feb 9, 2024
ac05f4f
Custm reconftw into dockerfile
rt-bast Feb 9, 2024
4b85d75
Add wapiti scanner
rt-bast Feb 11, 2024
b428a4f
Add axiom account profile before configuration
rt-bast Feb 11, 2024
9754488
Double add config
rt-bast Feb 11, 2024
33067b8
Add vim, jq, nmon and htop
rt-bast Feb 12, 2024
29916cc
Merge branch 'main' into main
rt-bast Feb 27, 2024
f609793
Merge branch 'main' of https://github.com/tdf-discipline-cybersecurit…
six2dez Mar 2, 2024
ecf0413
Merge pull request #838 from tdf-discipline-cybersecurity/main
six2dez Mar 2, 2024
a568e26
brutespray fix
six2dez Mar 2, 2024
5dd633e
Merge branch 'dev' of github.com:six2dez/reconftw into dev
six2dez Mar 2, 2024
931c5ce
Merge branch 'main' into dev
six2dez Mar 2, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -9,3 +9,4 @@ test/
*.tar
*.tar.*
*.zip
.DS_Store
33 changes: 30 additions & 3 deletions Docker/Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,9 @@ ARG SHODAN_API_KEY="XXXXXXXXXXXXXX"
ARG LANG=en_US.UTF-8
ARG LANGUAGE=en_US

ARG GIT_REPOSITORY_AXIOM="https://github.com/pry0cc/axiom"
ARG GIT_REPOSITORY_RECONFTW="https://github.com/six2dez/reconftw"

##################################################
###> Do NOT change anything beyond this point <###
##################################################
Expand All @@ -30,6 +33,9 @@ ARG SHODAN_API_KEY
ARG LANG
ARG LANGUAGE

ARG GIT_REPOSITORY_AXIOM
ARG GIT_REPOSITORY_RECONFTW

ENV COLLAB_SERVER=$COLLAB_SERVER
ENV XSS_SERVER=$XSS_SERVER
ENV SHODAN_API_KEY=$SHODAN_API_KEY
Expand All @@ -38,6 +44,9 @@ ENV LANG=$LANG
ENV LANGUAGE=$LANGUAGE
ENV LC_ALL=$LANG

ENV GIT_REPOSITORY_AXIOM=$GIT_REPOSITORY_AXIOM
ENV GIT_REPOSITORY_RECONFTW=$GIT_REPOSITORY_RECONFTW

ENV DEBIAN_FRONTEND=noninteractive
ENV DEBCONF_NONINTERACTIVE_SEEN=true

Expand All @@ -64,7 +73,7 @@ echo "deb-src http://kali.download/kali kali-rolling main contrib non-free" >> /
apt clean all
apt update
apt full-upgrade -f -y --allow-downgrades
apt install -y --no-install-recommends apt-utils ca-certificates curl git lsb-release nano wget
apt install -y --no-install-recommends apt-utils ca-certificates curl git lsb-release nano wget vim jq htop nmon

###>> Congifure Locales <<###
apt install -y --no-install-recommends locales
Expand All @@ -80,7 +89,7 @@ localepurge

###>> Configure Axiom <<###
mkdir -p /root/.axiom/
git clone https://github.com/pry0cc/axiom /root/.axiom/
git clone ${GIT_REPOSITORY_AXIOM} /root/.axiom/
cd /root/.axiom/interact
./axiom-configure --unattended --shell Bash
## This avoids useless error messages later.
Expand All @@ -90,7 +99,7 @@ touch /root/.axiom/interact/includes/functions.sh
###>> Install reconFTW <<###
mkdir -p /root/Tools
mkdir -p /reconftw
git clone https://github.com/six2dez/reconftw.git /reconftw
git clone ${GIT_REPOSITORY_RECONFTW} /reconftw
cd /reconftw
sh -c 'echo 1 | ./install.sh'

Expand All @@ -115,6 +124,24 @@ COPY amass_config.ini /root/.config/amass/config.ini
COPY github_tokens.txt /root/Tools/.github_tokens
COPY notify.conf /root/.config/notify/notify.conf

###>> Configure Axiom Provider <<###
RUN <<eot
###>> Regenerate SSH Keys <<###
# You REALLY do NOT want to use the default SSH keys in the base image
find /root/.ssh -type f -delete
ssh-keygen -b 2048 -t rsa -f /root/.ssh/axiom_rsa -q -N ""
cat /root/.ssh/axiom_rsa.pub > /root/.axiom/configs/authorized_keys
eot

COPY axiom-config.ini /root/.axiom/configs/config.ini
COPY axiom-custom-provider.json /root/.axiom/accounts/personal.json
RUN axiom-account personal
RUN az group delete --name axiom --yes --no-wait

# This command exits with return code 1, so leave the '|| :' or the build will fail.
COPY axiom-custom-provider.json /root/.axiom/accounts/personal.json
RUN axiom-build reconftw || :

## Issue 271
EXPOSE 85-90

Expand Down
7 changes: 6 additions & 1 deletion install.sh
Original file line number Diff line number Diff line change
Expand Up @@ -108,6 +108,7 @@ repos["trufflehog"]="trufflesecurity/trufflehog"
repos["nomore403"]="devploit/nomore403"
repos["SwaggerSpy"]="UndeadSec/SwaggerSpy"
repos["LeakSearch"]="JoelGMSec/LeakSearch"
repos["Wapiti"]="wapiti-scanner/wapiti"

function banner() {
tput clear
Expand Down Expand Up @@ -211,7 +212,11 @@ function install_tools() {
if [[ "brutespray" == "$repo" ]]; then
eval go build -o brutespray main.go $DEBUG_STD && eval chmod +x ./brutespray $DEBUG_STD
fi
fi
if [[ "wapiti" == "$repo" ]]; then
eval make install $DEBUG_STD
fi
if [[ "wapiti" == "$repo" ]]; then
eval make install $DEBUG_STD
if [[ "gf" == "$repo" ]]; then
eval cp -r examples ~/.gf $DEBUG_ERROR
elif [[ "Gf-Patterns" == "$repo" ]]; then
Expand Down
4 changes: 2 additions & 2 deletions reconftw.cfg
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
#################################################################
#############################################
# reconFTW config file #
#################################################################
#############################################

# General values
tools=~/Tools # Path installed tools
Expand Down
Loading