Asset Enumeration And Reconnaissance

This tool aims to determine all attack surfaces of the given target in URL format

Authors

• @msoneri
• @YasinCelik01
• @doganalkim

Run on Docker

1 - Clone the repository.

2 - Build the Docker image.

    sudo docker build -t kali .

3 - Run the container.

    sudo docker run -i -t --name assetenumeration -p 5000:5000 -v $(pwd):/root:rw kali

4 - Install the requirements

    pip3 install -r requirements.txt

5 - Run flask

    python3 flask_app.py

6 - Open your browser and go to http://127.0.0.1:5000

Run Locally

Get help

  python3 main.py -h

Run on Terminal

  python3 main.py -u $TARGET_URL

API Reference

Shodan API

If you want to use Shodan API, you shoould enter your API key in config.py file as string format.

	GET /shodan/host/search

Parameter	Type	Description
api_key	string	Optional. Your Shodan API key

Features

• Web Interface
• Terminal Execution
• Command Line Arguement

Related

Here are some tools requiered for project. If the tools below do not work from each directory, execute the command below.

cp $tool /usr/bin/

• Nmap
• Subfinder
• masscan

Optimizations

1. Timestamp is the exact time of beginning of the scan process.
2. During port scanning, each IP address is scanned once. Therefore, changes during the scan may not affact the result.

Feedback

If you have any feedback, please reach out to us.