Backend scanning infrastructure for Crossfeed, written in go.
Installation:
-
./init.sh
-
go build
Modules created:
- Port scanner. Uses Rapid7's Project Sonar database of internet scans to passively find open ports.
- Host scanner, using meg to fetch many paths from many hosts and fingerprint using Wappalyzer
- Subdomain takeover scanner, using subjack, to detect improperly configured domains
To be created:
- Subdomain scanner using amass
- and more
Usage:
- Run
./crossfeed-agent spawner
to wait for incoming requests from web
If you need to run requests manually, run ./crossfeed-agent [command] [args]
, e.g. ./crossfeed-agent scan-hosts /
to scan all live hosts for the root directory.