Fix WEBRUNNER: attack_box format, self-contained CIDR, tools submenu, Tor, teardown

- deploy_webrunner.py: full rewrite following attack_box pattern exactly — auto-generate
  engagement name when blank, select_provider+gather_provider_config per provider (handles
  region selection), separate teardown_after_scan (default=yes) from enhanced_opsec,
  use_tor prompt, bundled YAML defaults, setup_logging+confirm_action+show_naming_relationship
- utils/cidr_resolver.py: self-contained RIR delegation file downloader/parser — downloads
  APNIC/ARIN/RIPE/LACNIC/AFRINIC, caches 24h in ~/.cache/c2itall/cidr/, no geo-scout dep
- utils/chunk_utils.py: remove geo-scout _try_load_geo_scout() dependency, use cidr_resolver
- modules/webrunner/inputs/countries.yaml: bundled default country list (no external dep)
- modules/webrunner/inputs/targets.yaml: bundled default scan targets and ports
- deploy.py: move WEBRUNNER from main menu (item 14) to tools submenu (item 10)
- configure_node.yml: install tor+proxychains4, start tor service, configure proxychains,
  wait for circuit establishment when use_tor=true
- run_scan.yml: prefix command with proxychains4 when use_tor=true
- providers/webrunner.yml: add Play 4 teardown — Linode DELETE + AWS terminate-instances
  using hostvars instance IDs stored during provisioning, conditional on teardown_after_scan
This commit is contained in:
n0mad1k
2026-04-30 16:45:41 -04:00
parent 5a0a49a9c8
commit 131543d148
9 changed files with 502 additions and 194 deletions
+55
View File
@@ -0,0 +1,55 @@
---
# WEBRUNNER — default scan targets
# Define services of interest with ports and match criteria
targets:
- name: SSH
description: OpenSSH / SSH servers
ports: [22]
- name: HTTP
description: Web servers (plain)
ports: [80, 8080, 8000, 8888]
- name: HTTPS
description: Web servers (TLS)
ports: [443, 8443, 4443]
- name: RDP
description: Remote Desktop Protocol
ports: [3389]
- name: SMB
description: Windows file sharing
ports: [445, 139]
- name: FTP
description: File Transfer Protocol
ports: [21]
- name: Telnet
description: Legacy telnet
ports: [23]
- name: VNC
description: VNC remote desktop
ports: [5900, 5901, 5902]
- name: Proxy
description: HTTP/SOCKS proxies
ports: [3128, 8888, 1080, 1081]
- name: Database
description: Common database ports
ports: [3306, 5432, 1433, 27017, 6379]
- name: Kubernetes
description: K8s API server
ports: [6443, 8001]
- name: Docker
description: Docker daemon API
ports: [2375, 2376]
- name: SCADA
description: Industrial control systems
ports: [102, 502, 44818, 47808]