ID: Bywalks
Twitter ID:Bywalkss
Hackerone ID:Bywalks
公众号:攻防有道
安全方向:SDL建设、渗透蓝军、威胁情报、安全开发
DarkAngel 是一款全自动白帽漏洞扫描器,从hackerone、bugcrowd资产监听到漏洞报告生成、漏洞URL截屏、消息通知。
License: MIT License
[root@localhost DarkAngel]# python3 darkangel.py --add-new-domain
____ __ ___ __
/ __ ____ / // | ____ ____ ____ / /
/ / / / __ / ___/ //_/ /| | / __ \/ __
/ _ / /
/ // / // / / / ,< / ___ |/ / / / // / / /
//_,// //|// |// //_, /_//
/___/
By Bywalks | V 0.0.7
DarkAngel is a white hat scanner. Every white hat makes the Internet more secure.
02:27:26,108 [INFOR] darkangel:388 - [begin_time]2023-02-24 02:27:26.108900
02:27:56,145 [INFOR] collecth1domain:78 - Start collecting h1 private programs
02:27:57,103 [INFOR] collecth1domain:112 - 0 private programs have been Collected
02:27:57,104 [INFOR] collecth1domain:209 - Start collecting h1 new domains
02:27:57,664 [INFOR] ESHelper:79 - query dsl:{'query': {'match_all': {}}}, total:4968, res_cou
nt:4968
02:27:57,669 [INFOR] collecth1domain:249 - Finished
02:27:57,670 [INFOR] collecth1domain:38 - Start collecting h1 programs
02:29:05,132 [INFOR] collecth1domain:73 - 359 programs have been Collected
02:29:05,132 [INFOR] collecth1domain:166 - Start collecting h1 new domains
02:29:05,804 [INFOR] ESHelper:79 - query dsl:{'query': {'match_all': {}}}, total:4968, res_count:4968
02:37:31,971 [INFOR] collecth1domain:206 - Finished
02:37:31,971 [INFOR] collectbcdomain:54 - Start collecting bc programs
02:37:32,808 [INFOR] ESHelper:79 - query dsl:{'query': {'match_all': {}}}, total:4968, res_count:4968
02:37:32,813 [INFOR] collectbcdomain:64 - https://bugcrowd.com/programs.json?sort[]=promoted-desc&hidden[]=false&page[]=1
02:37:34,677 [INFOR] collectbcdomain:70 - [+] Collecting... (24 programs)
02:37:44,034 [INFOR] collectbcdomain:130 - [+] Program empty-sea-5360 returned a status code 404, skipping program details...
02:38:01,975 [INFOR] collectbcdomain:130 - [+] Program twilight-moon-8601 returned a status code 404, skipping program details...
02:38:03,022 [INFOR] collectbcdomain:130 - [+] Program D28qs1YDrtgsf5fFDf4asFLX returned a status code 404, skipping program details...
我问题好多...作者理解下,小白一枚
[es]
hosts=http://192.168.182.134:9200
auth_user=elastic
auth_passwd=darkangel123
[bc]
bc_cookie=_crowdcontrol_session=xx
[h1]
h1_cookie=__Host-session=xx
x_csrf_token=xx
[fuzz]
key=xx
运行python3 darkangel.py --add-domain-and-scan命令的时候,ES报错如下
elasticsearch.exceptions.ConnectionError: ConnectionError(<urllib3.connection.HTTPConnection object at 0x7fba2283d390>: Failed to establish a new connection: [Errno -2] Name or service not known) caused by: NewConnectionError(<urllib3.connection.HTTPConnection object at 0x7fba2283d390>: Failed to establish a new connection: [Errno -2] Name or service not known)
请问是哪里出错了吗?
如题
安装使用出现问题,有聊天方式吗,甩一下
能收到h1-token过期的推送,说明设置没问题
Traceback (most recent call last):
File "/root/DarkAngel-main/DarkAngel-main/darkangel.py", line 44, in
from subdomain.oneforall.subdomain_run import SubDomain
File "/root/DarkAngel-main/DarkAngel-main/subdomain/oneforall/subdomain_run.py", line 10, in
from subdomain.oneforall.oneforall import OneForAll as OneForAll
File "/root/DarkAngel-main/DarkAngel-main/subdomain/oneforall/oneforall.py", line 14, in
import export
File "/root/DarkAngel-main/DarkAngel-main/subdomain/oneforall/export.py", line 13, in
from common import utils
File "/root/DarkAngel-main/DarkAngel-main/subdomain/oneforall/common/utils.py", line 21, in
from common.database import Database
File "/root/DarkAngel-main/DarkAngel-main/subdomain/oneforall/common/database.py", line 8, in
from config.log import logger
File "/root/DarkAngel-main/DarkAngel-main/subdomain/oneforall/config/init.py", line 17, in
settings = Settings()
File "/root/DarkAngel-main/DarkAngel-main/subdomain/oneforall/config/init.py", line 12, in init
setting = importlib.import_module(setting_module)
File "/usr/lib/python3.10/importlib/init.py", line 126, in import_module
return _bootstrap._gcd_import(name[level:], package, level)
ModuleNotFoundError: No module named 'config.setting'
搞了好久...网上找不到解决办法
Hi, thank you very much for developing such an excellent tool.
But there were some problems during my installation
Scanner image:
Download source code
git clone https://github.com/Bywalks/DarkAngel.git
system always reports an error---fatal: Could not get current working directory: No such file or directory
I have already run setenforce 0 on the host
I would be grateful if you could reply!😊
{"type": "server", "timestamp": "2022-12-28T02:36:05,187Z", "level": "INFO", "component": "o.e.b.BootstrapChecks", "cluster.name": "docker-cluster", "node.name": "b5bbe232d264", "message": "bound or publishing to a non-loopback address, enforcing bootstrap checks" }
ERROR: [1] bootstrap checks failed
[1]: the default discovery settings are unsuitable for production use; at least one of [discovery.seed_hosts, discovery.seed_providers, cluster.initial_master_nodes] must be configured
ERROR: Elasticsearch did not exit normally - check the logs at /usr/share/elasticsearch/logs/docker-cluster.log
{"type": "server", "timestamp": "2022-12-28T02:36:05,198Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "b5bbe232d264", "message": "stopping ..." }
{"type": "server", "timestamp": "2022-12-28T02:36:05,220Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "b5bbe232d264", "message": "stopped" }
{"type": "server", "timestamp": "2022-12-28T02:36:05,220Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "b5bbe232d264", "message": "closing ..." }
{"type": "server", "timestamp": "2022-12-28T02:36:05,233Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "b5bbe232d264", "message": "closed" }
{"type": "server", "timestamp": "2022-12-28T02:36:05,236Z", "level": "INFO", "component": "o.e.x.m.p.NativeController", "cluster.name": "docker-cluster", "node.name": "b5bbe232d264", "message": "Native controller process has stopped - no new native processes can be started" }
刚更新了H1-Token,重新运行python3 darkangel.py --scan-new-domain还是提示这个
哈喽,按照说明拉取容器和程序并配置好config.ini,但在容器中运行python3 darkangel.py -h时报错,信息如下请问需要怎么解决
[root@f2127e556ec0 DarkAngel]# python3 darkangel.py -h
Traceback (most recent call last):
File "darkangel.py", line 32, in
from vulscan.xray_scan import *
File "/root/DarkAngel/vulscan/xray_scan.py", line 27, in
from vcommon.vuln_manage import VulnManager
File "/root/DarkAngel/vcommon/vuln_manage.py", line 18, in
from vconfig.config import *
File "/root/DarkAngel/vconfig/config.py", line 30, in
H1_COOKIE = config.get('h1', "h1_cookie")
File "/usr/local/python3/lib/python3.7/configparser.py", line 799, in get
d)
File "/usr/local/python3/lib/python3.7/configparser.py", line 394, in before_get
self._interpolate_some(parser, option, L, value, section, defaults, 1)
File "/usr/local/python3/lib/python3.7/configparser.py", line 444, in _interpolate_some
"found: %r" % (rest,))
configparser.InterpolationSyntaxError: '%' must be followed by '%' or '(', found: '%3D%3D--563881120fc1d004c05996f07e528e84f836efd3'
└─# python darkangel.py
Traceback (most recent call last):
File "/root/DarkAngel/darkangel.py", line 32, in
from vulscan.xray_scan import *
File "/root/DarkAngel/vulscan/xray_scan.py", line 26, in
from vcommon.ESHelper import ESHelper
File "/root/DarkAngel/vcommon/ESHelper.py", line 12, in
from elasticsearch import Elasticsearch, helpers
ModuleNotFoundError: No module named 'elasticsearch'
配置文件中,企业微信的touser和toparty如何查看和填写,企业微信下创建了一个企业,只有一个用户
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.