n0mad1k
131543d148
- deploy_webrunner.py: full rewrite following attack_box pattern exactly — auto-generate engagement name when blank, select_provider+gather_provider_config per provider (handles region selection), separate teardown_after_scan (default=yes) from enhanced_opsec, use_tor prompt, bundled YAML defaults, setup_logging+confirm_action+show_naming_relationship - utils/cidr_resolver.py: self-contained RIR delegation file downloader/parser — downloads APNIC/ARIN/RIPE/LACNIC/AFRINIC, caches 24h in ~/.cache/c2itall/cidr/, no geo-scout dep - utils/chunk_utils.py: remove geo-scout _try_load_geo_scout() dependency, use cidr_resolver - modules/webrunner/inputs/countries.yaml: bundled default country list (no external dep) - modules/webrunner/inputs/targets.yaml: bundled default scan targets and ports - deploy.py: move WEBRUNNER from main menu (item 14) to tools submenu (item 10) - configure_node.yml: install tor+proxychains4, start tor service, configure proxychains, wait for circuit establishment when use_tor=true - run_scan.yml: prefix command with proxychains4 when use_tor=true - providers/webrunner.yml: add Play 4 teardown — Linode DELETE + AWS terminate-instances using hostvars instance IDs stored during provisioning, conditional on teardown_after_scan
56 lines
1.1 KiB
YAML
56 lines
1.1 KiB
YAML
---
|
|
# WEBRUNNER — default scan targets
|
|
# Define services of interest with ports and match criteria
|
|
targets:
|
|
- name: SSH
|
|
description: OpenSSH / SSH servers
|
|
ports: [22]
|
|
|
|
- name: HTTP
|
|
description: Web servers (plain)
|
|
ports: [80, 8080, 8000, 8888]
|
|
|
|
- name: HTTPS
|
|
description: Web servers (TLS)
|
|
ports: [443, 8443, 4443]
|
|
|
|
- name: RDP
|
|
description: Remote Desktop Protocol
|
|
ports: [3389]
|
|
|
|
- name: SMB
|
|
description: Windows file sharing
|
|
ports: [445, 139]
|
|
|
|
- name: FTP
|
|
description: File Transfer Protocol
|
|
ports: [21]
|
|
|
|
- name: Telnet
|
|
description: Legacy telnet
|
|
ports: [23]
|
|
|
|
- name: VNC
|
|
description: VNC remote desktop
|
|
ports: [5900, 5901, 5902]
|
|
|
|
- name: Proxy
|
|
description: HTTP/SOCKS proxies
|
|
ports: [3128, 8888, 1080, 1081]
|
|
|
|
- name: Database
|
|
description: Common database ports
|
|
ports: [3306, 5432, 1433, 27017, 6379]
|
|
|
|
- name: Kubernetes
|
|
description: K8s API server
|
|
ports: [6443, 8001]
|
|
|
|
- name: Docker
|
|
description: Docker daemon API
|
|
ports: [2375, 2376]
|
|
|
|
- name: SCADA
|
|
description: Industrial control systems
|
|
ports: [102, 502, 44818, 47808]
|