
Una herramienta personal en GO para mis pasos habituales de enumeración inicial en un objetivo
. <(GoEnumerator completion)
# ~/.bashrc o ~/.profile
echo '. <(GoEnumerator completion)' >> ~/.bashrc
yay -S postgresql
sudo -u postgres -i
initdb --locale en_US.UTF-8 -E UTF8 -D '/var/lib/postgres/data' #initialize main database cluster
systemctl start postgresql
createuser --interactive --pwprompt #enter no to all the questions, because you dont want to give privileges to the user thats going to use this application
createdb GoEnumerator -U <username_we_created_above>
psql -d GoEnumerator
\c #GoEnumerator #connect to the particular database
\du #list all users and their permission level
\dt #list sum about all tables in the datatabase
rm ~/.psql_history
Haz clic aquí para más información
[blackarch files ]$ GoEnumerator project addOp hackthebox
Using config file: /home/rek2/.GoEnumerator.yaml
hackthebox
[blackarch files ]$ GoEnumerator project addHost -i 10.10.10.105 -p hackthebox
Using config file: /home/rek2/.GoEnumerator.yaml
hackthebox 10.10.10.105
[ blackarch files ]$ GoEnumerator project showHosts -p hackthebox
Using config file: /home/rek2/.GoEnumerator.yaml
--- Operation hackthebox ---
Hosts:
- 10.10.10.105
[blackarch ~ ]$ GoEnumerator project -h
Adds, Modify or Remove operations
Usage:
GoEnumerator project [flags]
GoEnumerator project [command]
Available Commands:
addDomain Add hostname or domain to a project IP/host
addHost Add new IP to a project or operation
addOp Add new operations/project name to database
removeDomain Remove a domain from the list of domain names
removeHost Remove a HOST IP from a project or operation
removeOp Remove your operation or project from the database
showDomains Show domain names
showHosts Show all hosts for a project
showOps List all Ops and Projects
Flags:
-h, --help help for project
Global Flags:
--config string config file (default is $HOME/.GoEnumerator.yaml)
Use "GoEnumerator project [command] --help" for more information about a command.
[ blackarch ~ ]$ GoEnumerator portscan -h
Diferent types of port scan to select. For example:
Usage:
GoEnumerator portscan [flags]
GoEnumerator portscan [command]
Available Commands:
getBanners gets ports found on database and try's to get the banner of what is running
showBanners Show saved banners for each host
showPorts Show ports
tcpScan Simple tcp port scan
Flags:
-h, --help help for portscan
Global Flags:
--config string config file (default is $HOME/.GoEnumerator.yaml)
Use "GoEnumerator portscan [command] --help" for more information about a command.
blackarch ~ ]$ GoEnumerator portscan showBanners -p cia
Using config file: /home/rek2/.GoEnumerator.yaml
Banners for Host: 104.236.237.78
- 80,Apache/2.4.18 (Ubuntu)
- 22,SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.4
- 443,Apache/2.4.18 (Ubuntu)
Banners for Host: 165.227.62.19
- 22,SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.4
- 443,nginx/1.10.3 (Ubuntu)
Banners for Host: 10.8.0.1
- 22,SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.4
GoEnumerator exploitDB search -f 10 Nginx
Using config file: /home/rek2/.GoEnumerator.yaml
____________________________________________________
+ ID: 32277
+ Description: Nginx 1.4.0 (Generic Linux x64) - Remote Overflow
+ Type: linux_x86-64
+ https://www.exploit-db.com/exploits/32277
____________________________________________________
+ ID: 25775
+ Description: Nginx 1.3.9 < 1.4.0 - Chuncked Encoding Stack Buffer Overflow (Metasploit)
+ Type: linux
+ https://www.exploit-db.com/exploits/25775
____________________________________________________
+ ID: 40768
+ Description: Nginx (Debian Based Distros + Gentoo) - 'logrotate' Local Privilege Escalation
+ Type: linux
+ https://www.exploit-db.com/exploits/40768
____________________________________________________
+ ID: 9901
+ Description: Nginx 0.7.0 < 0.7.61 / 0.6.0 < 0.6.38 / 0.5.0 < 0.5.37 / 0.4.0 < 0.4.14 - Denial of Service (PoC)
+ Type: linux
+ https://www.exploit-db.com/exploits/9901
Showing entries 11-20 of 14. Completed in 299.778µs
make
make darwin
make windows
si ya estás en alguno de estos SO, simplemente ejecuta make
make install
y asegúrate de que tu $GOPATH/bin esté en el $PATH de tu shell
export $PATH:$PATH:$PATH/bin
y añádelo a tu línea de exportación PATH en ~/.bashrc