Initial build: geo-scout geo-targeted network scanner

masscan port discovery → nmap fingerprinting → probe engine → pattern/version matching Dynamic YAML inputs: countries.yaml (country codes + CIDR resolution) and targets.yaml (fingerprint probes) RIR delegated stats for authoritative country CIDR data (no external API) Supports tcp_banner, http, https, rtsp, udp probe types Version extraction and comparison operators (<=, >=, ==, etc.) SQLite results per engagement, CSV/JSON export format-spec/ docs for generating input files externally
2026-04-30 10:38:20 -04:00
commit c20f189d49
18 changed files with 1221 additions and 0 deletions
@@ -0,0 +1,72 @@
+targets:
+  - name: "Ubuntu 24.04 SSH"
+    tags: [linux, ubuntu, ssh]
+    ports: [22]
+    probes:
+      - type: tcp_banner
+        patterns:
+          - "Ubuntu-24"
+          - "OpenSSH.*Ubuntu"
+        version_extract: "SSH-2\\.0-OpenSSH_([0-9p.]+)"
+        confidence: high
+
+  - name: "D-Link DIR-823X fw 240126/240802"
+    tags: [router, d-link, cpe, iot]
+    ports: [80, 443, 8080]
+    probes:
+      - type: http
+        path: "/"
+        match_in: body
+        patterns: ["DIR-823X"]
+        confidence: medium
+      - type: http
+        path: "/"
+        match_in: body
+        all_patterns: ["DIR-823X"]
+        patterns: ["240126", "240802"]
+        confidence: high
+
+  - name: "Exposed IP Camera"
+    tags: [camera, iot, surveillance]
+    ports: [80, 554, 8080, 8443, 37777, 34567]
+    probes:
+      - type: http
+        path: "/"
+        match_in: [body, headers]
+        patterns:
+          - "(?i)hikvision"
+          - "(?i)dahua"
+          - "(?i)ip.?camera"
+          - "(?i)ipcam"
+          - "(?i)webcam"
+          - "(?i)reolink"
+          - "(?i)amcrest"
+          - "(?i)axis"
+        confidence: medium
+      - type: rtsp
+        patterns: ["RTSP/1.0 200"]
+        confidence: medium
+
+  - name: "Cisco SD-WAN vManage <= 20.17"
+    tags: [cisco, sdwan, network]
+    ports: [443, 8443]
+    probes:
+      - type: https
+        path: "/dataservice/client/server"
+        method: GET
+        match_in: body
+        patterns: ["platformVersion"]
+        version_extract: '"platformVersion":"([0-9.]+)"'
+        version_compare:
+          operator: "<="
+          value: "20.17"
+        confidence: high
+
+  - name: "Open Redis"
+    tags: [database, redis, exposed]
+    ports: [6379]
+    probes:
+      - type: tcp_banner
+        patterns: ["redis_version"]
+        version_extract: "redis_version:([0-9.]+)"
+        confidence: high