mickdep / tartaros Goto Github PK

Currently the flags that a tool uses are determined the code. This could easily take the form of configuration files, in either YAML or JSON.

Many tools need wordlists, and it would be nice to have a pre-determined directory that contains wordlists. Also, this way the user can add their own wordlists.

Think about WP-scan, gobuster vhost, etc.

Also Nmap --script ssl* scan to check for ssl-related vulnerabilities.

Not sure If this is something I should do. Running all of these tools (or most of them) in parallel will create massive traffic. Not sure if this is a good idea.

Create profiles to run the scan under. This could for example be:

• "All" profile will do everthing (nmap script/version scan, nuclei OOB scan, feroxbuster with recursion, etc.)
• "Silent" profile will do a very peaceful scan (no script/version, no OOB, no feroxbuster recursion, etc.)
• Many more options...

Create a nice banner per tool that runs

Output to, for example, Markdown.