-
Notifications
You must be signed in to change notification settings - Fork 282
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
0 parents
commit 2080112
Showing
5 changed files
with
102 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,2 @@ | ||
# Auto detect text files and perform LF normalization | ||
* text=auto |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,73 @@ | ||
name: incloud | ||
|
||
on: | ||
workflow_dispatch: | ||
|
||
jobs: | ||
build: | ||
runs-on: ubuntu-latest | ||
steps: | ||
- name: Checkout Repo | ||
uses: actions/checkout@master | ||
|
||
- name: Setup golang | ||
uses: actions/setup-go@v2 | ||
with: | ||
go-version: 1.14 | ||
|
||
- name: Setup Dependencies | ||
run: sudo apt-get install libpcap-dev | ||
|
||
|
||
|
||
- name: Cache Go | ||
id: cache-go | ||
uses: actions/cache@v2 | ||
with: | ||
path: /home/runner/go | ||
key: ${{ runner.os }}-go | ||
|
||
- name: Setting up ProjectDiscovery tools | ||
if: steps.cache-go.outputs.cache-hit != 'true' | ||
env: | ||
GO111MODULE: on | ||
run: | | ||
go get -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder | ||
go get -v github.com/projectdiscovery/dnsx/cmd/dnsx | ||
go get -v github.com/projectdiscovery/naabu/v2/cmd/naabu | ||
go get -v github.com/projectdiscovery/httpx/cmd/httpx | ||
go get -v github.com/projectdiscovery/nuclei/v2/cmd/nuclei | ||
shell: bash | ||
|
||
|
||
- name: Running naabu to check top all ports | ||
run: | | ||
naabu -iL input/target.txt -rate 10000 -p - | tee output/active_ports.txt | ||
shell: bash | ||
|
||
|
||
- name: Running httpx for HTTP webservers probbing | ||
run: | | ||
httpx -l output/active_ports.txt -title | ||
httpx -l output/active_ports.txt | tee output/active_urls.txt | ||
shell: bash | ||
|
||
- name: Sorting the output results | ||
run: | | ||
find output -type f -exec sort {} -o {} \; | ||
shell: bash | ||
|
||
- name: Create local changes | ||
run: | | ||
git add output/active_ports.txt | ||
git add output/active_urls.txt | ||
- name: Commit results to Github | ||
run: | | ||
git config --local user.email "[email protected]" | ||
git config --global user.name "inbug-team" | ||
git commit -m "InCloud Report" -a --allow-empty | ||
- name: Push changes | ||
uses: ad-m/github-push-action@master | ||
with: | ||
github_token: ${{ secrets.GITHUB_TOKEN }} | ||
branch: ${{ github.ref }} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,27 @@ | ||
# InCloud GitHub云上扫描器 | ||
 | ||
## 简介 | ||
本工具只可用于安全测试,勿用于非法用途! | ||
### 工具定位 | ||
运行于GitHub Actions 的仓库中自动化、自定义和执行软件开发工作流程,可以自己根据喜好定制功能,InCloud已经为您定制好了八种针对网段和域名的不同场景的信息收集与漏洞扫描流程。 | ||
* [PortScan-AllPort](https://github.com/inbug-team/InCloud/tree/PortScan-AllPort) 对单IP文件列表进行全端口扫描,输出可用Web服务标题。 | ||
* [PortScan-AllPort-Xray-Dirscan](https://github.com/inbug-team/InCloud/tree/PortScan-AllPort-Xray-dirscan) 对单IP文件列表进行全端口扫描,输出可用Web服务标题,对Web服务进行Xray爬虫爬取与漏洞扫描,对Web服务进行Ffuf目录递归扫描。 | ||
* [PortScan-Top1000](https://github.com/inbug-team/InCloud/tree/PortScan-Top1000) 对单C段IP列表进行Top1000端口扫描,输出可用Web服务标题。 | ||
* [PortScan-Top1000-Xray](https://github.com/inbug-team/InCloud/tree/PortScan-Top1000-Xray) 对单C段IP列表进行Top1000端口扫描,输出可用Web服务标题,对Web服务进行Xray爬虫爬取与漏洞扫描。 | ||
* [PortScan-Top1000-Dirscan](https://github.com/inbug-team/InCloud/tree/PortScan-Top1000-Dirscan) 对单C段IP列表进行Top1000端口扫描,输出可用Web服务标题,对Web服务进行Ffuf目录递归扫描。 | ||
* [SubDomain-Portscan-Vulnscan](https://github.com/inbug-team/InCloud/tree/SubDomain-Portscan-Vulnscan) 对域名进行子域名枚举与接口查询,对查询的子域名进行Top1000端口扫描,输出可用Web服务标题,对Web服务进行Nuclei漏洞扫描。 | ||
* [SubDomain-Portscan-Xray](https://github.com/inbug-team/InCloud/tree/SubDomain-Portscan-Xray) 对域名进行子域名枚举与接口查询,对查询的子域名进行Top1000端口扫描,输出可用Web服务标题,对Web服务进行Xray爬虫爬取与漏洞扫描。 | ||
* [SubDomain-Portscan-Dirscan](https://github.com/inbug-team/InCloud/tree/SubDomain-Portscan-Dirscan) 对域名进行子域名枚举与接口查询,对查询的子域名进行Top1000端口扫描,输出可用Web服务标题,对Web服务进行Ffuf目录递归扫描。 | ||
|
||
## 使用方法 | ||
* 1.将项目fork到自己的github. | ||
* 2.修改流程文件里的 git config --local user.email 与 git config --global user.name 改成自己的邮箱与自己的ID(用于报告输出) | ||
* 3.修改input目录的扫描目标,使用action标签进行在线编译,操作如下: | ||
|
||
|
||
|
||
**官网:** | ||
https://www.inbug.org | ||
|
||
同时也可通过公众号联系: | ||
 |