Git Product home page Git Product logo

security_tools's Introduction

autobounty

Summary

Ultimately, I would like to use this tool to automate some of the common tasks I perform when looking for security bug bounties. The user interacts with the tool through the following dashboard:

dashboard

Stack

This is a Python application which depends on the following:

  • MongoDB
  • Flask
  • Docker
  • Python
  • Celery

I will also be taking advantage of some tools out there like subbrute and Sublist3r.

Setup

You can use docker-compose to run this application. Clone this repository and run the command docker-compose up from the folder root.

security_tools's People

Contributors

danielhartnell avatar

Watchers

James Cloos avatar

security_tools's Issues

Create unit tests to cover my codebase

I'm in the midst of database and route changes right now so I don't want to start immediately. Once the app is in a stable place, I want to prioritize the introduction of unit tests. I need to do the following:

  • Identify a unit test library that I want to use
  • Write a test that checks to see if the app returns a 200 for requests to /
  • Report my findings here
  • Create a new issue with a goal to increase code coverage if needed

Set a custom user agent to use with scans

I should provide some sort of an abuse flag in my scanner's user agent string. It should include some contact information or a link to this repository so anyone concerned about my scans can contact me and ask me to stop.

Sanitize user input

Make some effort to prevent XSS or related issues stemming from content injection.

Review Sublist3r and subbrute licensing

Once I review the licensing, I will formulate a plan for how I want to utilize the tools in my application. Ideally, I can fork both and include them as packages or submodules here (they should allow this). This would allow me to make changes to both and build a tighter integration with my app.

Report my findings here and create a new issue to track future work.

Host a minimum viable product in AWS

Begin working on the infrastructure to host this application once the basic functionality is in place. I will be ready to work on this bug when the following work is complete:

  • Companies can be added and a listing can be retrieved
  • Domains can be added under companies and a listing can be retrieved
  • A specific domain can be clicked on to return an empty overview page (page content will be populated with plugin output later)
  • The website should be locked behind some simple authentication until authorization and access control work is completed
  • Celery tasks should function (domain enumeration triggered via /scan endpoint) and update database with scan results

With that functionality complete, I can evaluate the AWS infrastructure in this bug. This bug will be complete when I have a pipeline in place with automated testing, linting and deployment.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.