Cerberus

A powerful vulnerability scanner. Subdomain enumeration uses aioDNS with asyncio for asynchronous fast scanning. It covers the target's full asset scope for batch vulnerability scanning, middleware information collection, automatic proxy IP collection, and automatically uses proxy IPs to protect the real IP when probing WAF information. If the local IP is blocked by WAF, it automatically switches proxy IPs to continue scanning. WAF information collection (100+ domestic and international WAFs) includes Safedog, Yunlock, Alibaba Cloud, Yundun, Tencent Cloud, etc. It provides some known WAF bypass methods. Middleware vulnerability detection (Thinkphp, Weblogic, etc., CVE-2018-5955, CVE-2018-12613, CVE-2018-11759, etc.). Supports SQL injection, XSS, command execution, file inclusion, SSRF vulnerability scanning. Supports custom vulnerability email push functionality.

Main Features

• 😈 Single URL vulnerability scanning

  Supports SQL injection, XSS, command execution, file inclusion, SSRF

  Performs vulnerability scanning on a single site

  python3 cerberus.py -target www.qq.com

  

• 🌸 Thread setting

  Multi-threaded, default 7 threads

  python3 cerberus.py -target www.qq.com -thread 7

• 👿 Asynchronous subdomain batch scanning

  Uses aioDNS, asyncio asynchronous. After subdomain enumeration, adds to scan queue to cover the target's full asset scope for batch vulnerability scanning

  python3 cerberus.py -target www.qq.com -subdomain

  

• 💀 Proxy IP collection

  Crawls real-time free proxy IPs from 9 sites, but the IP survival rate is low, around 20%. The process of checking IP survival may block the scan.

  • www.data5u.com
  • www.xicidaili.com
  • www.goubanjia.com
  • www.ip3366.net
  • www.iphai.com
  • cn-proxy.com
  • ip.jiangxianli.com
  • www.xiladaili.com
  • ip.ihuan.me

  python3 cerberus.py -target www.qq.com -proxy

  

• 👹 WAF information collection

  100+ domestic and international WAF information, a powerful fingerprint library, including Safedog, Yunlock, Alibaba Cloud, Yundun, Tencent Cloud, etc. Provides some known WAF bypass methods

  Make sure to provide a URL with parameters for WAF testing!

  python3 cerberus.py -target https://open.weixin.qq.com/frame?t=home/web_tmpl&lang=zh_CN -waf

• 🙈 Middleware information collection

  After information collection, automatically scans for middleware vulnerabilities based on the results

  • WAF

  • CDN

  • CMS

  • Web Servers

  • Web Frameworks

  • Operating Systems

  python3 cerberus.py -target -detectMid

  

• 🐼 Specify middleware vulnerability scanning

  If some middleware information of the target is known, you can specify the type and scan directly

  • Thinkphp CVE-2018-5955

  • Phpmyadmain CVE-2018-12613

  • Dedecms

  • Tomcat CVE-2018-11759

  • Weblogic

  • Wordpress

  python3 cerberus.py -target www.qq.com -midlleware weblogic

• :trollface: Batch scan from input file

  • The file path must be an absolute path

  • Must be a txt text format, ensure each line contains only one domain

  python3 cerberus.py -file absolute path

• 🍪 Set Cookie

  python3 cerberus.py -cookie cookie

• 🙊 Output vulnerability scan report

  python3 cerberus.py -outfile

🐰 Praise me!

• 😽 If you think this project is helpful to you, for better open-source security tools! Please support me! Thank you for your support!

Disclaimer

This project is only for learning and communication. Any illegal consequences caused by using this tool are not related to the author!!