Skip to content
This repository was archived by the owner on Jul 30, 2020. It is now read-only.

Continuous external monitoring and vulnerability scanning for organization assets

License

Notifications You must be signed in to change notification settings

Code-dot-mil/crossfeed-agent

Repository files navigation

This repository has been archived. Please see https://github.com/deptofdefense/Crossfeed for the new, redesigned version of Crossfeed.

Crossfeed Agent

Backend scanning infrastructure for Crossfeed, written in go.

Installation:

  1. ./init.sh

  2. go build

Modules created:

  • Port scanner. Uses Rapid7's Project Sonar database of internet scans to passively find open ports.
  • Host scanner, using meg to fetch many paths from many hosts and fingerprint using Wappalyzer
  • Subdomain takeover scanner, using subjack, to detect improperly configured domains

To be created:

  • Subdomain scanner using amass
  • and more

Usage:

  1. Run ./crossfeed-agent spawner to wait for incoming requests from web

If you need to run requests manually, run ./crossfeed-agent [command] [args], e.g. ./crossfeed-agent scan-hosts / to scan all live hosts for the root directory.

About

Continuous external monitoring and vulnerability scanning for organization assets

Resources

License

Contributing

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors