终极信息收集工具包
一个基于 Python 的信息收集与侦察工具包

Argus 是一个一体化、由 Python 驱动的工具包,旨在简化信息收集与侦察流程。它融合了简洁直观的界面与丰富可靠的模块,使分析人员能够以一致且精确的方式高效评估网络、Web 应用及安全环境。
本工具仅供教育和合乎道德的使用。作者不对本工具的任何非法使用或滥用承担责任。用户需对自己的行为负全部责任,并必须确保已获得对目标系统进行扫描的明确授权。
看看 Argus 的实际运行效果: 看看 Argus 的实际运行效果:
git clone https://github.com/jasonxtn/argus.git
cd argus
pip install -r requirements.txt
python -m argus
pip install argus-recon
argus
git clone https://github.com/jasonxtn/argus.git
cd argus
chmod +x install.sh && ./install.sh
python -m argus
git clone https://github.com/jasonxtn/argus.git
cd argus
docker build -t argus-recon:latest .
docker run -it --rm -v $(pwd)/results:/app/results argus-recon:latest
启动 Argus:
argus
# if running from folder: python -m argus
浏览可用模块:
argus> modules
选择一个模块:
argus> use 1
设置目标和选项:
argus> set target example.com
argus> set threads 10
运行模块:
argus> run
通过在 config/settings.py 中配置 API 密钥或将其设置为环境变量来增强功能:
export VIRUSTOTAL_API_KEY="your_key_here"
export SHODAN_API_KEY="your_key_here"
export CENSYS_API_ID="your_id_here"
export CENSYS_API_SECRET="your_secret_here"
export GOOGLE_API_KEY="your_key_here"
export HIBP_API_KEY="your_key_here"
检查 API 状态:
argus> show api_status
编辑 config/settings.py 以自定义:
重大重构:全新 CLI 设计与模块扩展
最初的简单数字编号界面
注意:版本 2.0 引入了破坏性变更。用户必须学习新的 CLI 命令,而非之前的数字编号系统。
如果这个工具对您有帮助,请考虑在 GitHub 上给我们一个 star!您的支持对我们意义重大,也能帮助更多人发现这个项目。
| 命令 | 类别 | 描述 | 示例 |
|---|
modules | 发现 | 列出所有模块 | modules |
modules -d | 发现 | 列出详细信息 | modules -d |
search | 发现 | 按关键词搜索 | search ssl |
use | 选择 | 选择模块 | use 42 |
helpmod | 帮助 | 模块帮助 | helpmod 42 |
set target | 配置 | 设置目标 | set target example.com |
set | 配置 | 设置选项 | set threads 20 |
unset | 配置 | 取消设置选项 | unset target |
opts | 配置 | 显示选项 | opts |
scope | 配置 | 显示配置 | scope |
profile | 配置 | 应用配置文件 | profile speed |
run | 执行 | 运行所选模块 | run |
runall | 执行 | 运行某类别 | runall infra |
runfav | 执行 | 运行收藏项 | runfav |
last | 执行 | 重新运行上一次 | last |
fav | 收藏 | 管理收藏项 | fav add 42 |
show modules | 信息 | 浏览模块 | show modules |
show api_status | 信息 | 检查 API | show api_status |
show options | 信息 | 显示选项 | show options |
show options_full | 信息 | 详细选项 | show options_full |
info | 信息 | 项目信息 | info |
recent | 信息 | 最近使用的模块 | recent |
viewout | 输出 | 查看缓存输出 | viewout |
grepout | 输出 | 搜索输出 | grepout "192.168" |
clear | 实用工具 | 清屏 | clear |
banner | 实用工具 | 显示横幅 | banner |
reset | 实用工具 | 重置配置 | reset |
exit | 实用工具 | 退出 Argus | exit |
quit | 实用工具 | 退出 Argus | quit |
help | 帮助 | 显示帮助 | help |
| 网络与基础设施 | Web 应用分析 | 安全与威胁情报 |
|---|
| 1. Associated Hosts | 53. Archive History | 103. Censys Reconnaissance |
| 2. DNS Over HTTPS | 54. Broken Links Detection | 104. Certificate Authority Recon |
| 3. DNS Records | 55. Carbon Footprint | 105. Data Leak Detection |
| 4. DNSSEC Check | 56. CMS Detection | 106. Exposed Environment Files |
| 5. Domain Info | 57. Cookies Analyzer | 107. Firewall Detection |
| 6. Domain Reputation Check | 58. Content Discovery | 108. Global Ranking |
| 7. HTTP/2 & HTTP/3 Support | 59. Crawler | 109. HTTP Headers |
| 8. IP Info | 60. Robots.txt Analyzer | 110. HTTP Security Features |
| 9. Open Ports Scan | 61. Directory Finder | 111. Malware & Phishing Check |
| 10. Server Info | 62. Email Harvesting | 112. Pastebin Monitoring |
| 11. Server Location | 63. Performance Monitoring | 113. Privacy & GDPR Compliance |
| 12. SSL Chain Analysis | 64. Quality Metrics | 114. Security.txt Check |
| 13. SSL Expiry Alert | 65. Redirect Chain | 115. Shodan Reconnaissance |
| 14. TLS Cipher Suites | 66. Sitemap Parsing | 116. SSL Labs Report |
| 15. TLS Handshake Simulation | 67. Social Media Presence | 117. SSL Pinning Check |
| 16. Traceroute | 68. Technology Stack Detection | 118. Subdomain Enumeration |
| 17. TXT Records | 69. Third-Party Integrations | 119. Subdomain Takeover |
| 18. WHOIS Lookup | 70. JavaScript File Analyzer | 120. VirusTotal Scan |
| 19. Zone Transfer | 71. CORS Misconfiguration Scanner | 121. CT Log Query |
| 20. ASN Lookup | 72. Login Page Brute Identifier | 122. Breached Credentials Lookup |
| 21. Reverse IP Lookup | 73. Hidden Parameter Discovery | 123. Cloud Bucket Exposure |
| 22. IP Range Scanner | 74. Clickjacking Test | 124. JWT Token Analyzer |
| 23. RDAP Lookup | 75. Form Grabber | 125. Exposed API Endpoints |
| 24. NTP Information Leak | 76. Favicon Hashing | 126. Git Repository Exposure Check |
| 25. IPv6 Reachability Test | 77. HTML Comments Extractor | 127. Typosquat Domain Checker |
| 26. BGP Route Analysis | 78. CAPTCHA Presence Checker | 128. SPF / DKIM / DMARC Validator |
| 27. CDN Detection | 79. JavaScript Obfuscation Detector | 129. Open Redirect Finder |
| 28. Reverse DNS Scan | 80. Virtual Host Fuzzer | 130. Rate-Limit & WAF Bypass Test |
| 29. Network Timezone Detection | 81. Session Cookie Lifetime Checker | 131. Security Changelog Diff |
| 30. Geo-DNS Footprint | 82. HTML5 Feature Abuse Detector | 132. Session Hijacking (Passive) |
| 31. SPF Network Extractor | 83. Autocomplete Vulnerability Checker | 133. Rogue Certificate Check |
| 32. NS Geo/ASN Diversity | 84. Embedded Object Hunter | 134. JS Malware Scanner |
| 33. DNS SLA Latency Monitor | 85. Multi-Language URL Tester | 135. Cloud Service Enumeration |
| 34. RPKI Route Validity | 86. Pixel Tracker Finder | |
| 35. Recursive Nameserver Leak | 87. SEO Abuse Detector | |
| 36. Dual-Stack Behavior Profiler | 88. Dependency JS/CDN Scanner | |
| 37. ICMP Reachability Matrix | 89. WebSocket Endpoint Sniffer | |
| 38. IP Allocation History Tracker | 90. API Schema Grabber | |
| 39. Autonomous Neighbor Peering Map | 91. Lazy-Load Resource Finder | |
| 40. TLS Session Resumption Map | 92. HTTP Method Enumerator | |
| 41. Network Certificate Inventory | 93. GraphQL Introspection Probe | |
| 42. SSH Banner & Key Fingerprinter | 94. File Upload Surface Finder | |
| 43. SNMP Public Community Checker | 95. DOM Sink Scanner | |
| 44. SNMP Bulk Walk | 96. Cache Behavior Analyzer | |
| 45. UDP Service Sampler | 97. Cookie Scope Diff Across Subdomains | |
| 46. NetBIOS Name Query | 98. CSP Deep Analyzer | |
| 47. TTL Analysis | 99. Third-Party Script Risk Profiler | |
| 48. IRR Routing Registry Analyzer | 100. Static Asset Fingerprinter | |
| 49. Dual Stack Diff | 101. Crawl Rules | |
| 50. DNS CAA Checker | 102. Email Config | |
| 51. Decoy DNS Beacon | ||
| 52. Geo IP Spoof Detection |