Fix WEBRUNNER: attack_box format, self-contained CIDR, tools submenu, Tor, teardown
- deploy_webrunner.py: full rewrite following attack_box pattern exactly — auto-generate engagement name when blank, select_provider+gather_provider_config per provider (handles region selection), separate teardown_after_scan (default=yes) from enhanced_opsec, use_tor prompt, bundled YAML defaults, setup_logging+confirm_action+show_naming_relationship - utils/cidr_resolver.py: self-contained RIR delegation file downloader/parser — downloads APNIC/ARIN/RIPE/LACNIC/AFRINIC, caches 24h in ~/.cache/c2itall/cidr/, no geo-scout dep - utils/chunk_utils.py: remove geo-scout _try_load_geo_scout() dependency, use cidr_resolver - modules/webrunner/inputs/countries.yaml: bundled default country list (no external dep) - modules/webrunner/inputs/targets.yaml: bundled default scan targets and ports - deploy.py: move WEBRUNNER from main menu (item 14) to tools submenu (item 10) - configure_node.yml: install tor+proxychains4, start tor service, configure proxychains, wait for circuit establishment when use_tor=true - run_scan.yml: prefix command with proxychains4 when use_tor=true - providers/webrunner.yml: add Play 4 teardown — Linode DELETE + AWS terminate-instances using hostvars instance IDs stored during provisioning, conditional on teardown_after_scan
This commit is contained in:
@@ -0,0 +1,36 @@
|
||||
---
|
||||
# WEBRUNNER — default country target list
|
||||
# Adjust to match your engagement scope
|
||||
countries:
|
||||
- code: RU
|
||||
name: Russia
|
||||
- code: CN
|
||||
name: China
|
||||
- code: IR
|
||||
name: Iran
|
||||
- code: KP
|
||||
name: North Korea
|
||||
- code: BY
|
||||
name: Belarus
|
||||
- code: SY
|
||||
name: Syria
|
||||
- code: CU
|
||||
name: Cuba
|
||||
- code: VE
|
||||
name: Venezuela
|
||||
- code: MM
|
||||
name: Myanmar
|
||||
- code: SD
|
||||
name: Sudan
|
||||
- code: IQ
|
||||
name: Iraq
|
||||
- code: UA
|
||||
name: Ukraine
|
||||
- code: AZ
|
||||
name: Azerbaijan
|
||||
- code: GE
|
||||
name: Georgia
|
||||
- code: AM
|
||||
name: Armenia
|
||||
- code: MD
|
||||
name: Moldova
|
||||
@@ -0,0 +1,55 @@
|
||||
---
|
||||
# WEBRUNNER — default scan targets
|
||||
# Define services of interest with ports and match criteria
|
||||
targets:
|
||||
- name: SSH
|
||||
description: OpenSSH / SSH servers
|
||||
ports: [22]
|
||||
|
||||
- name: HTTP
|
||||
description: Web servers (plain)
|
||||
ports: [80, 8080, 8000, 8888]
|
||||
|
||||
- name: HTTPS
|
||||
description: Web servers (TLS)
|
||||
ports: [443, 8443, 4443]
|
||||
|
||||
- name: RDP
|
||||
description: Remote Desktop Protocol
|
||||
ports: [3389]
|
||||
|
||||
- name: SMB
|
||||
description: Windows file sharing
|
||||
ports: [445, 139]
|
||||
|
||||
- name: FTP
|
||||
description: File Transfer Protocol
|
||||
ports: [21]
|
||||
|
||||
- name: Telnet
|
||||
description: Legacy telnet
|
||||
ports: [23]
|
||||
|
||||
- name: VNC
|
||||
description: VNC remote desktop
|
||||
ports: [5900, 5901, 5902]
|
||||
|
||||
- name: Proxy
|
||||
description: HTTP/SOCKS proxies
|
||||
ports: [3128, 8888, 1080, 1081]
|
||||
|
||||
- name: Database
|
||||
description: Common database ports
|
||||
ports: [3306, 5432, 1433, 27017, 6379]
|
||||
|
||||
- name: Kubernetes
|
||||
description: K8s API server
|
||||
ports: [6443, 8001]
|
||||
|
||||
- name: Docker
|
||||
description: Docker daemon API
|
||||
ports: [2375, 2376]
|
||||
|
||||
- name: SCADA
|
||||
description: Industrial control systems
|
||||
ports: [102, 502, 44818, 47808]
|
||||
Reference in New Issue
Block a user