Backend scanning infrastructure for Crossfeed, written in go.
Installation:
./init.sh
go build
Modules created:
Port scanner. Uses Rapid7's Project Sonar database of internet scans to passively find open ports.
Host scanner, using meg to fetch many paths from many hosts and fingerprint using Wappalyzer
Subdomain takeover scanner, using subjack, to detect improperly configured domains
To be created:
Subdomain scanner using amass
and more
Usage:
Run ./crossfeed-agent spawner to wait for incoming requests from web
If you need to run requests manually, run ./crossfeed-agent [command] [args], e.g. ./crossfeed-agent scan-hosts / to scan all live hosts for the root directory.