go-vaddy: VAddy API Command-Line Tool

VAddy API Command-Line Tool using golang
https://vaddy.net

Go-vaddy can start scan and check the result.

日本語ドキュメントはこちらです。 https://github.com/vaddy/go-vaddy/blob/master/README_ja.md

OS type

You can use exe files on go-vaddy/bin directory. If you use linux(64bit), use vaddy-linux-64bit.

For example, ./vaddy-linux-64bit api_key userID FQDN

OS	file
Linux(64bit)	vaddy-linux-64bit
MacOS(64bit Intel)	vaddy-macosx-64bit
Windows(64bit)	vaddy-win-64bit.exe
FreeBSD(64bit)	vaddy-freebsd-64bit

Usage (start scan and get the result)

Exit status

Go-vaddy returns 0 (no errors, no vulnerabilities) or 1 (errors, 1 or more vulnerabilities).

ENV

You can check V1/V2 project on the dashboard screen after login.

for V1 Project

export VADDY_TOKEN="123455667789"  
export VADDY_USER="ichikaway"  
export VADDY_HOST="www.examplevaddy.com"  
#export VADDY_CRAWL="30"
#export VADDY_SCAN_TYPE="SQLI,XSS,..."

for V2 Project

export VADDY_TOKEN="123455667789"
export VADDY_USER="ichikaway"
export VADDY_PROJECT_ID="your project id"
#export VADDY_CRAWL="30"
#export VADDY_SCAN_TYPE="SQLI,XSS"

VADDY_USER is VAddy login ID.
VADDY_CRAWL is optional. If you don't specify it, VAddy uses the latest crawl data.
You can specify crawl label keyword on VADDY_CRAWL like this

export VADDY_CRAWL="search result pages"
VADDY_SCAN_TYPE is optional to specify a specific scan type. Scan type list document Without this option, all scan will be performed. If you specify an item that does not exist or an item that does not exist in your plan, the error Invalid scan type selected will be returned.

Command Execution

cd bin
./vaddy-linux-64bit

Slack Integration

Setting these OS environment variables, Post message to the slack when VAddy found vulnerabilities.

export SLACK_WEBHOOK_URL="webhook url"
export SLACK_USERNAME="your user (optional)"
export SLACK_CHANNEL="your channel (optional)"
export SLACK_ICON_EMOJI=":smile: (optional)"
export SLACK_ICON_URL="icon url (optional)"

WARNING on `vaddy_privatenet.sh connect`

vaddy_privatenet.sh connect を実行すると WARNING が発生します。
クロール、スキャンは正常に実行されます。
とりあえず、報告です。

% ./vaddy_privatenet.sh connect                                                                                                                                                                      master

################################################################
# VAddy Private Net Tools (Version: 1.0.3)
# This software is released under the MIT License,
#
# This tool needs Mac or Linux, Java, ssh command
#
################################################################

---------------- setting information -----------------
  FQDN: example.local
  User: hoge
  Local IP: 192.168.31.62
  Local Port: 80
  Agent Options: -u hoge -h example.local -w 192.168.31.62:80
------------------------------------------------------




=== Connect ===

Log file setup : vaddy/2019_05_08_20_31_23.txt
ssh and ssh-keygen OK.
DNS OK.
HTTPS connectivity OK.
Connection to web server OK.
SSH files exist OK.
..................................
ssh -i vaddy/ssh/id_rsa -N -R 0.0.0.0:2181:192.168.31.62:80 [email protected]
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by vaddy.pip.Vaddy (file:/Users/hoge/Downloads/go-vaddy-master/privatenet/bin/vaddy_agent.jar) to field java.lang.ProcessImpl.pid
WARNING: Please consider reporting this to the maintainers of vaddy.pip.Vaddy
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
pid:69383
Checking E2E connectivity...
E2E connectivity OK.
Connect Status: 0

以下、環境です

% sw_vers  
ProductName:    Mac OS X
ProductVersion: 10.13.6
BuildVersion:   17G6030

% java -version 
java version "11" 2018-09-25
Java(TM) SE Runtime Environment 18.9 (build 11+28)
Java HotSpot(TM) 64-Bit Server VM 18.9 (build 11+28, mixed mode)

vaddy / go-vaddy Goto Github PK

go-vaddy's Introduction

go-vaddy: VAddy API Command-Line Tool

OS type

Usage (start scan and get the result)

Exit status

ENV

for V1 Project

for V2 Project

Command Execution

Slack Integration

go-vaddy's People

Contributors

Stargazers

Watchers

Forkers

go-vaddy's Issues

Recommend Projects

Recommend Topics

Recommend Org