stevenaldinger / decker Goto Github PK
View Code? Open in Web Editor NEWDeclarative penetration testing orchestration framework
License: Mozilla Public License 2.0
decker's People
Contributors
Stargazers
Watchers
Forkers
ik-security forestnd flatl1neapt dirtyhatbuilds nsk harry1080 attackgithub bbhunter rajivraj rahmiy jesus-bustos triplekill svbar lychhayly p3t3rp4rk3r marciopocebon 5l1v3r1 dekoder cleanmgr112 donaldrich80 exengineer1 despratesparten fixerman hartl3y94 iq-scm ggmanskidecker's Issues
Fatal when using a new plugin
Hi, i have the following error while trying to use a new plugin in an HCL file (plugin compile successfully) :
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0x879dcd]
goroutine 1 [running]:
github.com/stevenaldinger/decker/internal/pkg/hcl.parsePluginHCL(0xc0000844e0, 0x56, 0x4b)
/go/src/github.com/stevenaldinger/decker/internal/pkg/hcl/plugins.go:23 +0x11d
github.com/stevenaldinger/decker/internal/pkg/hcl.GetResourceBlockSchema(0xc0000a5ab6, 0x6, 0x7f6a8a1ebfff)
/go/src/github.com/stevenaldinger/decker/internal/pkg/hcl/hcl_schema.go:98 +0xcb
github.com/stevenaldinger/decker/internal/pkg/hcl.getResourceContent(0xc00009bd40, 0x0)
/go/src/github.com/stevenaldinger/decker/internal/pkg/hcl/resources.go:11 +0x5b
github.com/stevenaldinger/decker/internal/pkg/hcl.GetExprVars(0xc00009bd40, 0xc00014f6a0)
/go/src/github.com/stevenaldinger/decker/internal/pkg/hcl/resources.go:26 +0x40
github.com/stevenaldinger/decker/internal/pkg/dependencies.addEdgesToGraph(0xc000091ec0, 0xc00008f960, 0x2, 0x2, 0xc00014f640, 0xc00014f638)
/go/src/github.com/stevenaldinger/decker/internal/pkg/dependencies/graph.go:56 +0x153
github.com/stevenaldinger/decker/internal/pkg/dependencies.Sort(0xc00008f960, 0x2, 0x2, 0xc00008f9d0, 0x1, 0x1)
/go/src/github.com/stevenaldinger/decker/internal/pkg/dependencies/graph.go:107 +0x259
main.main()
/go/src/github.com/stevenaldinger/decker/cmd/decker/main.go:36 +0xed
I can't figure out why
Nmap protocol detection plugin port sanitization
Hello,
I noticed a problem in the Nmap plugin. The parsed port may contains spaces that could result in formating problems in other plugins.
The parsed value has to be cleaned, the following code makes the work for me :
parsedPort := strings.TrimSpace(portInfoSplit[0])
Build plugin example script
Hay first really like this idea, been playing around with it for some time.
Would love some more examples on how to use the build_plugin script. Or how to create the .so file.
Protocol detection
Hi,
First if all, thanks for the project! I really like the idea.
The README mentions following example:
variable "target_host" {
type = "string"
}
resource "nslookup" "nslookup" {
dns_server = "8.8.4.4"
host = "${var.target_host}"
}
resource "nmap" "nmap" {
for_each = "${nslookup.ip_address}"
host = "${each.key}"
}
// for each IP, check if nmap found port 25 open.
// if yes, run metasploit's smtp_enum scanner
resource "metasploit" "metasploit" {
for_each = "${nslookup.ip_address}"
exploit = "auxiliary/scanner/smtp/smtp_enum"
options = {
RHOSTS = "${each.key}"
}
plugin_enabled = "${nmap["${each.key}"].25 == "open"}"
}
However, most of the time you will need to detect the protocol and not rely on standard ports.
Is it currently possible to do so? e.g. launch a TLS scan for every port where (START)TLS was detected?
Multiples input for plugins and concurrency
Hey ! I'm reposting my question here for more visibility :)
I'm trying to build a first plugin basically launching "dirb" against an URL.
I wonder how i can write the hcl code in order to target 2 urls. My following attempts fail with "index out of range" (note that the plugin code works perfectly fine with one URL)
resource "dirb" "dirb" {
for_each = ["https://www.google.fr","https://www.google.com"]
target="${each.key}"
}
Moreover, i think it would be interesting to add a "concurrency" feature. During a pentest engagement there are multiples IPs to target so i would be awesome to launch a decker instance for each target IP especially if time consuming tasks are involved (as dirb :) ).
Add binary releases so people can choose their OS distribution
This has been something interesting me for a while now but I never set up any easy downloads page to try to add decker to your own environment.
This will be relevant for another issue in decker-plugin so will resolve ASAP.
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.