jesusprubio / bluebox Goto Github PK

We need a cli which should require all modules and all of them could be used with the same interface (console: command line or interactive, GUI, etc.). For now I've adapted the Bluebox one (https://github.com/assaultjs/assaultjs/blob/master/bin/client.js) with some improvements, it's only interactive. Some options to reimplement it:

• https://github.com/crcn/celeri: I like the MongoDb shell and it's inspired on it. Moreover it supports both the interactive mode and command line.
• https://www.npmjs.com/package/commander: The classic option.
• https://github.com/SBoudrias/Inquirer.js

Common VoIP servers web management panels discovery and brute-force.

For now it only does an initial request, it sould be completed to get the IP address of the target.

We need the library to emitting events to communicate partial information (ie: one IP correctly scanned in a domain scanning).

Now we're printing directly in the modules, which has no sense for a library.

• Be sure a port is open before use it (randomPort)

More testing needed

https://github.com/jxcore/jxcore-cordova

pipobscure/NodeJS-AsteriskManager#24 (comment)

.deb, rpm, brew, etc

The command "npm run lint" will show the affected code.

If the prompt get lost, just push ENTER.

• http://packetstormsecurity.com/search/?q=francesco+tornieri+SIP+User+Enumeration&s=files
• https://github.com/jesusprubio/metasploit-sip/blob/master/enumerator_asterisk_nat_peers.rb

IMHO they are clearer than the library "async". In the other hand generators are very complicated to JS newcomers and we want a lot of people involved in the project.

http://ci.marcelog.name:8080/view/NodeJS/job/Nami/javadoc/?

Notified, waiting for a response.

It would be better to add a few of them with different padding.

If it were too little Node gets crazy because of its asynchronous nature.

I can't find any serious written in Node.

Remove them and add as independent issues to give them visibility.

Mocha?
http://mochajs.org/

• Public function parameters, etc.

https://github.com/cbou/markdox

• It is located in "external" directory for now.
• We should contribute to the project:
  • Create a npm package to easily include it like the rest of external node tools.
  • Add a wordlist with common VoIP web panels paths.
  • Filter only important info of the response.

• When they accept this pull request integrate it in the right way.
  • eviltik/evilscan#33
• Contribute to:
  • Add support for UDP and SYN TCP scan.
  • Add support for IPv6.
• Remove Nmap dependency. We want a pure JS app.

Due to "geoip-lite" package.

• https://www.kali.org/
• http://www.backbox.org/
• http://www.pentoo.ch/

• grunt task
• New module which downloads or inspects a repository.
  http://bekk.github.io/retire.js/

Use a pure JS DB, we don't want binary dependencies.

https://github.com/louischatriot/nedb

For now we're only doing async in the scans and it hardcoded to make 10 requests in parallel, to avoid problems (ie: open too much sockets). We have to research on it, implement a timer in the modules and compare it with Nmap, SIPVicious and MassCan.

SHODAN API fails a lot, so this feature is needed to have another option.
ie: http://www.exploitsearch.net/json.php?q=asterisk%201.4&e=0

marcelog/Nami#28 (comment)

And after using Ctrl+C.

http://docs.shodanhq.com/rest.html

https://github.com/eviltik/evilscan

Through UDP spoofing.

tjfontaine/node-dns#74

Add different "qop" and encryption support (SHA).

To respect the new modules structure
https://github.com/jesusprubio/bluebox-ng/tree/master/modules