Skip to content
This repository has been archived by the owner on Jul 30, 2020. It is now read-only.

Continuous external monitoring and vulnerability scanning for organization assets

License

Notifications You must be signed in to change notification settings

Code-dot-mil/crossfeed-agent

Repository files navigation

This repository has been archived. Please see https://github.com/deptofdefense/Crossfeed for the new, redesigned version of Crossfeed.

Crossfeed Agent

Backend scanning infrastructure for Crossfeed, written in go.

Installation:

  1. ./init.sh

  2. go build

Modules created:

  • Port scanner. Uses Rapid7's Project Sonar database of internet scans to passively find open ports.
  • Host scanner, using meg to fetch many paths from many hosts and fingerprint using Wappalyzer
  • Subdomain takeover scanner, using subjack, to detect improperly configured domains

To be created:

  • Subdomain scanner using amass
  • and more

Usage:

  1. Run ./crossfeed-agent spawner to wait for incoming requests from web

If you need to run requests manually, run ./crossfeed-agent [command] [args], e.g. ./crossfeed-agent scan-hosts / to scan all live hosts for the root directory.

About

Continuous external monitoring and vulnerability scanning for organization assets

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published