tuhinshubhra / red_hawk Goto Github PK

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

License: MIT License

PHP 99.58% Dockerfile 0.42%

scanner crawler information-gathering admin-scanner backups-finder sql-vulnerability-scannig cms-detector cloudflare-detection geo-ip subdomain-scanner

red_hawk's Introduction

Version 2.0.0

By R3D#@0R_2H1N A.K.A Tuhinshubhra

All in one tool for Information Gathering and Vulnerability Scanning

Scans That You Can Perform Using RED HAWK :

Basic Scan
- Site Title NEW
- IP Address
- Web Server Detection IMPROVED
- CMS Detection
- Cloudflare Detection
- robots.txt Scanner
Whois Lookup IMPROVED
Geo-IP Lookup
Grab Banners IMPROVED
DNS Lookup
Subnet Calculator
Nmap Port Scan
Sub-Domain Scanner IMPROVED
- Sub Domain
- IP Address
Reverse IP Lookup & CMS Detection IMPROVED
- Hostname
- IP Address
- CMS
Error Based SQLi Scanner
Bloggers View NEW
- HTTP Response Code
- Site Title
- Alexa Ranking
- Domain Authority
- Page Authority
- Social Links Extractor
- Link Grabber
WordPress Scan NEW
- Sensitive Files Crawling
- Version Detection
- Version Vulnerability Scanner
Crawler
MX Lookup NEW
Scan For Everything - The Old Lame Scanner

Released Versions:

- Version 1.0.0 [11-06-2017]
- Version 1.1.0 [15-06-2017]
- Version 2.0.0 [11-08-2017]

Changelog:

Version 1.0.0
- Initial Launch
Version 1.1.0
- Updated The fix command
Version 2.0.0
- Separated all scans so that you are served the amount of information you need
- Sub-Domain Scanner improved
- fix command improved
- Web Server Detection Improved
- CMS Detection Improved
- Banner Grabbing Improved
- Added WordPress Scanner
- Added Bloggers View
- Added MX Lookup
- Added Update option
- RED HAWK Banner Updated
- Many Other Internal Fixes

Installation:

Run The Tool and Type fix This will Install All Required Modules.
For The Bloggers View To Work Properly you have to configure RED HAWK with moz.com's api keys for that follow the following steps:

How To Configure RED HAWK with moz.com for Bloggers View Scan

Create an account in moz follow this link : https://moz.com/community/join
After successful account creation and completing the verification you need to generate the API Keys
You can get your API Keys here: https://moz.com/products/mozscape/access
Get your AccessID and SecretKey and replace the $accessID and $secretKey variable's value in the config.php file
All set, now you can enjoy the bloggers view.

Usage:

git clone https://github.com/Tuhinshubhra/RED_HAWK
cd RED_HAWK
php rhawk.php
Use the "help" command to see the command list or type in the domain name you want to scan (without Http:// OR Https://).
Select whether The Site Runs On HTTPS or not.
Select the type of scan you want to perform
Leave the rest to the scanner

List of CMS Supported

RED HAWK's CMS Detector currently is able to detect the following CMSs (Content Management Systems) in case the website is using some other CMS, Detector will return could not detect.

WordPress
Joomla
Drupal
Magento

Known Issues

ISSUE: Scanner Stops Working After Cloudflare Detection!

SOLUTION: Use The fix Command OR Manually Install php-curl & php-xml

Watch The Video TO See How To Solve This Isuue : https://www.youtube.com/watch?v=QuFPY9NFTM8

Video Demonstration

Suggestions And Feedbacks

Want to contribute to RED HAWK or point out something wrong? Just create a new issue here: https://github.com/Tuhinshubhra/RED_HAWK/issues/new I'd love to hear from you.

Support and Donations

Found RED HAWK cool? well you could buy me a cup of tea ;) (no alcohol plz xD) just send any amount of donations (in BTC) to this address : 1NbiQidWWVVhWknsfPSN1MuksF8cbXWCku

Can't donate? well that's no problem just drop a THANK YOU this will motivate me to create more exciting stuffs for you ;)

TODOs

Make a proper update option ( Installs current version automatically )
Add more CMS to the detector
Improve The WordPress Scanner ( Add User, Theme & Plugins Enumeration )
Create a web version of the scanner
Add XSS & LFI Scanner
Improve the Links grabber thingy under bloggers view
Add some other scans under the Bloggers View

red_hawk's People

Contributors

Stargazers

Watchers

Forkers

online-9 tobey123 dviros ossecfile umutbasal team-firebugs davedacoda weeshlow zenzue songofhack idkwim spoock1024 h1d3r qiuyazhong magictoy alwayz1 awesome-security haoirui yzpku kerasking bbsyaya s0x06 infosecsecurity c0axial 5up3rc husoul s4uxnat simlan bizchina jamalmo datatraveler00 burtay signedbytes f3eev sunrain520 dotslashtx bhasbor 78778443 arryboom adzon clicknull webvul aliweiya codiacshq linux4sa therealnixxer srinathweb fb11 vnhacker1337 zzhacked owltux remy22 anonshadow h3ll0world libenfu bushibigniu eg0xy 3453-315h sbokul forging2012 bash-sec renales hybridious l3op scorpioni4e tinywizard drippingfuture xingyun86 0thm4n3 securitywarrior pareshpawar irivera007 methos2016 bluebear171 hanshaze stellvie tim1512 aln7 svasapolle samyoyo moriarty2016 coder1105 thanatoskira irudayarajisawa minkione nusree moonlightmp janddda mohanad-mw3 clutzsec auroraruanjian m41doror tardummy01 kaotic op3n-tor houcy ch4p34un0ir tzubal gadoi amdadam

red_hawk's Issues

Some Feedback & Issue

@Tuhinshubhra It's nice tool for information gathering. But i was disappointed that when i scan an website SQL Scanner Not work. Is it work as SQL Map or not?.
Please Add scanner for XSS,XSRF Vulnerability ,if it possible.

Nmap

When We Add Website In HTTP form Like www.xxx.com Nmap Is Work And Scanning Ports

But When We Add Simple IP Like 10.10.10.102 Other Ifo We Get But Nmap Say Need Host

Red hawk

Wordpress User Enumeration Support Added?

Hello author I have created version that has the wordpress User Enum Function but I'm unable to get the code You wrote to run even though my module alone does work . I'm going to make a pull if You find any issues can You clear them up, and add the code to a spot in the code you like if this isn't sufficient for You.

Hh

cd RED_WARK

Ls

Error Valid Key Required, for nmap port scan and whois lookup please fix it soon...

Hacker Target added api outh key for using nmap and whois lookup please use any another API

Username and password

It is asking for username and password. What is the username and password?

************[email protected]

RED_HAWK

Bang hack fb gimana

Keep up the great work!

This is a great tool. I look forward to future features. Would it be possible to add a bulk lookup feature that would output the data to a CSV file?

usage problem

i was stuck at..

git clone https://github.com/Tuhinshubhra/RED_HAW Cloning into 'RED_HAW'...
Username for 'https://github.com': Epencepe
Password for 'https://[email protected]':
remote: Repository not found.
fatal: repository 'https://github.com/Tuhinshubhra/RED_HAW/' not found

how yo fix it.. please help me

GeoIP error

I was analyzing a Brazilian government website, and when I clicked to show the GeoIP, the coordinates took me to a lake in the United States

I don't understand this problem

Update

It has been long time, i need an update.

Using hackertarget.com API limited problem?

I think RedHawk is using some api from hackertarget.com, a paid scanner service at https://hackertarget.com/about/, right?

I'm develop a web application project(https://vnshares.com/) with RedHawk but get a limited api call at: https://hackertarget.com/scan-membership/. Can you explain and suggest me about this limited.

RED HAWK ISSUE

When I selected "Reverse IP Lookup & CMS Detection" this program closes immediately. Also there is a problem with "Basic Recon", "SQLi Scanner", "Bloggers View", "Crawler" options. Can you please solve this problems?

l/backup

My

How to use

In order to scan individual person..what to use....Facebook ID. Com. Email address.com ..zoom address .com...or jus username?? how to use INSTEAD of a website ?? And do I need to ROOT?? Doesn't say .OBVIOUSLY A BEGINNER....thank u so much for ur [email protected]

"error valid key required"

I am receiving the error: "error valid key required" when executing a few of the functions, i.e. nmap port scans, subdomain scans, OSINT, etc. I cloned the program and ran it in a few different environments/distros with the same result.

"error valid key required." while using whois lookup, namp port scan or anything.

#59
@Tuhinshubhra

scanner not scaning full

Hi,
scanner not scanning full website at Robots File: its stuck....or am i missing any plugin? please help...

https://wpvulndb.com/api/v2/wordpresses/ is dead! Need to update to API v3!

Just wanted to give you a heads up that the API for v2 is dead since last year and now we need API v3 with a token.

ها

Originally posted by @hatem0909 in #43 (comment)

Feature: Write/Print Results

Thanks for the versatile script.
Currently, I have to manually add the results to a file or other tools for further analysis.
The script I'm using was included with the LazyScript.

Thank You
Donations coming soon ;)

Just some feedback/queries:

Firstly, Grats on the program, as much as I hate PHP yourve done a ok job, incredibly similar to my Python "V3n0m-Scanner", gotta be the first one ive seen on Github thats got the same "All in one Scanner" idea :)

So you know the Cloudflare resolving can be enhanced alot, you could also easily adapt it to also work on blazingfast.io protected websites aswell 👍

Well done on the "Fix"/"Recovery" option aswell :') Great minds and all ;0

I was curious as to why the SQLi scanning was so lacklustre though? are you planning on expanding it or not going to bother?

Curious as to wether or not you plan to add any of the following: XSS Detection, SSI Vulns, LFI/RFI -> RCE vulns, CSRF and/or CSRF-Bounce attack detection?

If your willing or would like to Collab on features or help on each others tools in whatever way we can even constructive feedback, well, thatd be fine by me :)

How comes you went for PHP not Python3 though?

Take care mate :)

Ok

Nice

info

username and password

When git cloning into RED_HAWK using termux it asks for a username and password then fails the authentication if not provided
I've never had this happen before
Thank you for your work
KrTKl909

-bash: php: command not found

I git cloned it cd'd into it and ran php rhawk.php what do i need to install for PHP?

Program not recognizing installed php-curl and php-xml

As mentioned in the Description i used fix to install php-curl and php-xml but the code when restarted does not recognize these modules as installed and crashes every time we do a search

Problem with in app Robots.txt

When I type in 0 in app or A for all every time it gets to Robots File it shows,
“(info) Robots File: root@kali:~RED_HAWK# “
I let it sit for about 10 mins or so and nothing happens. So I hit the minize button and went back in and after the # it shows the blinking box like I need to type?

Scanner Stops Working After Cloudflare Detection

Scanner Stops Working After Cloudflare Detection even though i have install php-curl and php-xml
any help

Segmantation error

U build A great tool but ,
When i load in termux segmentation error show

& also not scan vuln variable of site properly

php curl

I am having this error

Nice Bank Card Cracking

Fuck Bro

Red hawk

M

Docker version

Create a Dockerfile to make a Docker version.

Pressing [F] in scan menu quits application

[11] WordPress Scan (Only If The Target Site Runs On WP)
[12] Crawler
[13] MX Lookup
[A] Scan For Everything - (The Old Lame Scanner)
[F] Fix (Checks For Required Modules and Installs Missing Ones)
[U] Check For Updates
[B] Scan Another Website (Back To Site Selection)
[Q] Quit!

[#] Choose Any Scan OR Action From The Above List: fix

[!] Invalid Input! Please Enter a Valid Option!

[#] Choose Any Scan OR Action From The Above List: F

root@supersecretkali:~/red_hawk#

This also happens with a lowercase f

Random exit on option [9] + [10]

So far all options work well with RED_HAWK except [9] and [10], as soon as I select the option, it completes and exists the program so I have to reopen and type in everything again to resume scanning/enumerating.

"Error valid key required '' while using nmap port scan

When i use nmap port scan it show ''error valid key required '' and when i use whois lookup it show limit reached .please help

ح

Can you reload video?

Hi,
I don't know if it happens to me only, but could you update the video?

Thanks.

Suggestion!

No doubt thats a Great Tool for recon :) Just a Little suggestion try adding something like that saves the output in a File :) For scanning everything ;)

Make a env var-based execution mode

Frankly, I love this tool but I find it so limited by the fact it's interactive.
That would be so much simpler if we could just define options as variables before executing it, so that we could run scans in scripts and store results in files.
At the moment, the only solution for this is to use pipes |, echo and wait instructions but that's really unconvenient.
Tell me what you think !