diff --git a/.editorconfig b/.editorconfig new file mode 100644 index 0000000..ea8840b --- /dev/null +++ b/.editorconfig @@ -0,0 +1,47 @@ +# EditorConfig for Diablo +# https://editorconfig.org + +root = true + +# Unix-style newlines with a newline ending every file +[*] +end_of_line = lf +insert_final_newline = true +charset = utf-8 +trim_trailing_whitespace = true + +# Shell scripts +[*.{sh,bash}] +indent_style = space +indent_size = 2 + +# The main Diablo script +[Diablo] +indent_style = space +indent_size = 2 + +# Markdown files +[*.md] +indent_style = space +indent_size = 2 +trim_trailing_whitespace = true + +# YAML files +[*.{yml,yaml}] +indent_style = space +indent_size = 2 + +# JSON files +[*.json] +indent_style = space +indent_size = 2 + +# Configuration files +[*.{conf,config}] +indent_style = space +indent_size = 2 + +# Makefile +[Makefile] +indent_style = tab + diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..9542d44 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,60 @@ +# Git attributes for Diablo project + +# Auto detect text files and perform LF normalization +* text=auto + +# Bash scripts +*.sh text eol=lf +Diablo text eol=lf + +# Documentation +*.md text eol=lf +*.txt text eol=lf + +# GitHub workflows +.github/**/*.yml text eol=lf +.github/**/*.yaml text eol=lf + +# Configuration files +*.conf text eol=lf +*.config text eol=lf + +# Database files +*.db -text +*.sqlite -text +*.sqlite3 -text + +# Binary files +*.png binary +*.jpg binary +*.jpeg binary +*.gif binary +*.ico binary +*.pdf binary +*.zip binary +*.tar.gz binary +*.deb binary +*.rpm binary + +# Executables +*.exe binary +*.bin binary + +# Archives +*.7z binary +*.bz2 binary +*.gz binary +*.rar binary +*.tar binary +*.xz binary +*.zip binary + +# Diff and patch files +*.diff text +*.patch text +*.rej text + +# Mark files as linguist-generated (for GitHub stats) +# Uncomment if you have auto-generated files +# *.generated.js linguist-generated=true + diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml new file mode 100644 index 0000000..057f682 --- /dev/null +++ b/.github/FUNDING.yml @@ -0,0 +1,24 @@ +# Funding links for Diablo + +# GitHub Sponsors (recommended) +github: Anlominus + +# Other funding platforms (optional) +# Example: +# patreon: username +# open_collective: project-name +# ko_fi: username +# tidelift: platform/framework +# community_bridge: project-name +# liberapay: username +# issuehunt: username/repo +# otechie: username +# lfx_crowdfunding: project-name +# polar: project-name +# buy_me_a_coffee: username + +# Custom links +custom: + - ['PayPal', 'your-paypal-link-here'] + - ['Bitcoin', 'your-bitcoin-address-here'] + diff --git a/.github/ISSUE_TEMPLATE/bug_report.md b/.github/ISSUE_TEMPLATE/bug_report.md new file mode 100644 index 0000000..0f8107e --- /dev/null +++ b/.github/ISSUE_TEMPLATE/bug_report.md @@ -0,0 +1,35 @@ +--- +name: ๐Ÿž ื“ื™ื•ื•ื— ืขืœ ื‘ืื’ +about: ื“ื•ื•ื— ืขืœ ื‘ืื’ ื›ื“ื™ ืœืขื–ื•ืจ ืœื ื• ืœืฉืคืจ +title: "[BUG] " +labels: bug +assignees: '' +--- + +## ๐Ÿ” ืชื™ืื•ืจ ื”ื‘ืื’ +ืชื™ืื•ืจ ืงืฆืจ ื•ืžื“ื•ื™ืง ืฉืœ ื”ื‘ืื’. + +## ๐Ÿ”„ ืฆืขื“ื™ื ืœืฉื—ื–ื•ืจ ื”ื‘ืื’ +1. ืขื‘ื•ืจ ืœ'...' +2. ืœื—ืฅ ืขืœ '...' +3. ื’ืœื•ืœ ืขื“ '...' +4. ืฆืคื” ื‘ืฉื’ื™ืื” + +## โœ… ื”ืชื ื”ื’ื•ืช ืฆืคื•ื™ื” +ืชื™ืื•ืจ ืงืฆืจ ื•ืžื“ื•ื™ืง ืฉืœ ืžื” ืฉื”ื™ื™ืช ืžืฆืคื” ืฉื™ืงืจื”. + +## ๐Ÿ“ธ ืฆื™ืœื•ืžื™ ืžืกืš +ืื ืจืœื•ื•ื ื˜ื™, ื”ื•ืกืฃ ืฆื™ืœื•ืžื™ ืžืกืš ื›ื“ื™ ืœืขื–ื•ืจ ืœื”ืกื‘ื™ืจ ืืช ื”ื‘ืขื™ื” ืฉืœืš. + +## ๐Ÿ’ป ืกื‘ื™ื‘ื” +- ืžืขืจื›ืช ื”ืคืขืœื”: [ืœืžืฉืœ macOS, Linux, Windows] +- ื’ืจืกื” ืฉืœ Diablo: [ืœืžืฉืœ 1.0.0] +- ืคืœื˜ืคื•ืจืžื”: [ืœืžืฉืœ Termux, macOS, Linux] + +## ๐Ÿ“‹ ื”ืงืฉืจ ื ื•ืกืฃ +ื”ื•ืกืฃ ื›ืœ ื”ืงืฉืจ ืื—ืจ ืขืœ ื”ื‘ืื’ ื›ืืŸ. + +## ๐Ÿ”— ืงื™ืฉื•ืจื™ื ืจืœื•ื•ื ื˜ื™ื™ื +- [ืงื™ืฉื•ืจ 1](URL) +- [ืงื™ืฉื•ืจ 2](URL) + diff --git a/.github/ISSUE_TEMPLATE/feature_request.md b/.github/ISSUE_TEMPLATE/feature_request.md new file mode 100644 index 0000000..547f463 --- /dev/null +++ b/.github/ISSUE_TEMPLATE/feature_request.md @@ -0,0 +1,29 @@ +--- +name: ๐Ÿ’ก ื‘ืงืฉืช ืชื›ื•ื ื” ื—ื“ืฉื” +about: ื”ืฆืข ืจืขื™ื•ืŸ ืœืคืจื•ื™ืงื˜ +title: "[FEATURE] " +labels: enhancement +assignees: '' +--- + +## ๐Ÿš€ ืชื™ืื•ืจ ื”ืชื›ื•ื ื” ื”ืžื‘ื•ืงืฉืช +ืชื™ืื•ืจ ืงืฆืจ ื•ืžื“ื•ื™ืง ืฉืœ ื”ืชื›ื•ื ื” ืฉื‘ืจืฆื•ื ืš ืœืจืื•ืช. + +## ๐Ÿ’ญ ืžื” ื”ืžื ื™ืข ืœื‘ืงืฉื”? +ืžื” ื”ื‘ืขื™ื” ืฉื”ืชื›ื•ื ื” ื”ื–ื• ืชืคืชื•ืจ? + +## ๐Ÿ”ง ืคืชืจื•ืŸ ืžื•ืฆืข +ืชื™ืื•ืจ ืงืฆืจ ื•ืžื“ื•ื™ืง ืฉืœ ืžื” ืฉื‘ืจืฆื•ื ืš ืฉื™ืงืจื”. + +## ๐ŸŽฏ ื—ืœื•ืคื•ืช ืฉื ืฉืงืœื• +ืชื™ืื•ืจ ืงืฆืจ ื•ืžื“ื•ื™ืง ืฉืœ ื›ืœ ื—ืœื•ืคื•ืช ืื• ืชื›ื•ื ื•ืช ืฉืขืฉื• ื‘ื—ืฉื™ื‘ื”. + +## ๐Ÿ“‹ ืžื™ืžื•ืฉ ืืคืฉืจื™ +ื›ื™ืฆื“ ืœื“ืขืชืš ื ื™ืชืŸ ืœืžืžืฉ ืืช ื”ืชื›ื•ื ื”? + +## ๐Ÿ”— ื“ื•ื’ืžืื•ืช +ืื ื”ืชื›ื•ื ื” ืงื™ื™ืžืช ื‘ื›ืœื™ื ืื—ืจื™ื, ืฉืชืฃ ืงื™ืฉื•ืจื™ื ืื• ื“ื•ื’ืžืื•ืช. + +## ๐Ÿ“‹ ืžื™ื“ืข ื ื•ืกืฃ +ื”ื•ืกืฃ ื›ืœ ื”ืงืฉืจ ืื—ืจ ืื• ืฆื™ืœื•ืžื™ ืžืกืš ืขืœ ื‘ืงืฉืช ื”ืชื›ื•ื ื” ื›ืืŸ. + diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md new file mode 100644 index 0000000..bf702db --- /dev/null +++ b/.github/PULL_REQUEST_TEMPLATE.md @@ -0,0 +1,54 @@ +> ื‘ืกืดื“ + +## ๐ŸŽฏ ืชื™ืื•ืจ ื”ืฉื™ื ื•ื™ +ืชื™ืื•ืจ ืงืฆืจ ื•ืชืžืฆื™ืชื™ ืฉืœ ื”ืฉื™ื ื•ื™ื™ื ื”ืžื‘ื•ืฆืขื™ื ื‘-PR ื–ื”. + +## ๐Ÿ”— ืกื•ื’ ืฉื™ื ื•ื™ +ื‘ื—ืจ ืืช ืกื•ื’ ื”ืฉื™ื ื•ื™ ืฉืžืชืืจ ืืช ื”-PR: + +- [ ] ๐Ÿ› ืชื™ืงื•ืŸ ื‘ืื’ (ืฉื™ื ื•ื™ ืฉืื™ื ื• ืฉื•ื‘ืจ ื”ืงื™ื™ืžื™ื) +- [ ] โœจ ืชื›ื•ื ื” ื—ื“ืฉื” (ืฉื™ื ื•ื™ ืฉืœื ืฉื•ื‘ืจ ื”ืงื™ื™ืžื™ื) +- [ ] ๐Ÿ’ฅ ืฉื™ื ื•ื™ ืฉื•ื‘ืจ (ืฉื™ื ื•ื™ ืฉื™ืฉื‘ื•ืจ ืคื•ื ืงืฆื™ื•ื ืœื™ื•ืช ืงื™ื™ืžืช) +- [ ] ๐Ÿ“š ืชื™ืขื•ื“ (ืฉื™ื ื•ื™ื™ื ื‘ืชื™ืขื•ื“ ื‘ืœื‘ื“) +- [ ] ๐ŸŽจ ืฉื™ืคื•ืจ ืขื™ืฆื•ื‘/ืขื™ืฆื•ื‘ UI +- [ ] โšก๏ธ ืฉื™ืคื•ืจ ื‘ื™ืฆื•ืขื™ื +- [ ] โ™ป๏ธ refactor (ืฉื™ื ื•ื™ ืงื•ื“ ืฉืœื ืžืฉื ื” ืคื•ื ืงืฆื™ื•ื ืœื™ื•ืช) +- [ ] โœ… ื‘ื“ื™ืงื•ืช (ื”ื•ืกืคืช/ืฉื™ืคื•ืจ ื‘ื“ื™ืงื•ืช) +- [ ] ๐Ÿ”ง ืจื›ื™ื‘ื™ ื‘ื ื™ื™ื” (ืฉื™ื ื•ื™ ื‘ืžืขืจื›ืช ื”ื‘ื ื™ื™ื” ืื• ืชืœื•ื™ื•ืช ื—ื™ืฆื•ื ื™ื•ืช) + +## ๐Ÿงช ืื™ืš ืœื‘ื“ื•ืง? +ืชื™ืื•ืจ ื”ืคื™ืจื•ื˜ ืื™ืš ืœื‘ื“ื•ืง ืืช ื”ืฉื™ื ื•ื™ื™ื: +1. ืฉืœื‘ 1... +2. ืฉืœื‘ 2... +3. ืฆืคื•ื™... + +## โœ… ื‘ื“ื™ืงื•ืช +ืจืฉื•ื ืืช ื”ื‘ื“ื™ืงื•ืช ืฉื‘ื™ืฆืขืช: +- [ ] ื‘ื“ื™ืงื” A +- [ ] ื‘ื“ื™ืงื” B + +## ๐Ÿ“ธ ืฆื™ืœื•ืžื™ ืžืกืš (ืื ืจืœื•ื•ื ื˜ื™) +ื”ื•ืกืฃ ืฆื™ืœื•ืžื™ ืžืกืš ืื ื”ืฉื™ื ื•ื™ ืžืฉืคื™ืข ืขืœ UI. + +## ๐Ÿ“‹ ืจืฉื™ืžืช ื‘ื“ื™ืงื” +- [ ] ื”ืงื•ื“ ืฉืœื™ ืขื•ืžื“ ื‘ื”ื ื—ื™ื•ืช ื”ืคืจื•ื™ืงื˜ +- [ ] ื‘ื™ืฆืขืชื™ ืกืงื™ืจื” ืขืฆืžื™ืช ืฉืœ ื”ืงื•ื“ ืฉืœื™ +- [ ] ืฆื™ื™ื ืชื™ ื”ืขืจื•ืช ืขืœ ืงื•ื“ ืžื•ืจื›ื‘ ื‘ืžื™ื•ื—ื“ +- [ ] ื”ืงื•ื“ ืฉืœื™ ื™ื•ืฆืจ ืื–ื”ืจื•ืช ื—ื“ืฉื•ืช +- [ ] ื”ื‘ื“ื™ืงื•ืช ืฉืœื™ ืขื•ื‘ืจื•ืช +- [ ] ื›ืœ ืงื‘ืฆื™ ืชื™ืขื•ื“ ืžืขื•ื“ื›ื ื™ื + +## ๐Ÿ“ ืžื™ื“ืข ื ื•ืกืฃ +ื”ื•ืกืฃ ื›ืœ ืžื™ื“ืข ื ื•ืกืฃ ืฉื™ื›ื•ืœ ืœืขื–ื•ืจ ืœืžืืฉืจ ืืช ื”-PR. + +## ๐Ÿ”— ืงื™ืฉื•ืจื™ื ืจืœื•ื•ื ื˜ื™ื™ื +- ืขื•ื ื” ืขืœ: #(ืžืกืคืจ issue) +- ืงืฉื•ืจ ืœ: #(ืžืกืคืจ issue) + +--- + +**ื”ืขืจื•ืช:** +- ื ื ืœืฉืžื•ืจ ืขืœ ื ื™ืžื•ืก ื•ื›ื‘ื•ื“ ื‘ืžื”ืœืš ื‘ื™ืงื•ืจืช ื”ืงื•ื“ +- ื ื ืœื”ืกื‘ื™ืจ ื”ื—ืœื˜ื•ืช ืงื•ื“ ืžื•ืจื›ื‘ื•ืช ื‘ืืžืฆืขื•ืช ื”ืขืจื•ืช +- ื ื ืœื•ื•ื“ื ืฉื›ืœ ื”ื‘ื“ื™ืงื•ืช ืขื•ื‘ืจื•ืช ืœืคื ื™ ื”ื’ืฉื” + diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..3390e10 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,10 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + commit-message: + prefix: "โฌ†๏ธ" + include: "scope" + diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml new file mode 100644 index 0000000..a03cd84 --- /dev/null +++ b/.github/workflows/ci.yml @@ -0,0 +1,55 @@ +name: ๐Ÿงช CI - Build and Test + +on: + push: + branches: [ main, develop ] + pull_request: + branches: [ main, develop ] + +jobs: + shellcheck: + name: ๐Ÿ” Shell Check + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + + - name: Run ShellCheck + uses: ludeeus/action-shellcheck@master + env: + SHELLCHECK_OPTS: -e SC1090,SC1091 + + install-deps: + name: ๐Ÿ“ฆ Install Dependencies + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + + - name: Install dependencies + run: | + sudo apt-get update + sudo apt-get install -y masscan nmap dnsutils whois nikto enum4linux dirb anonsurf || true + + integration-test: + name: ๐Ÿงช Integration Tests + runs-on: ubuntu-latest + needs: [install-deps] + steps: + - uses: actions/checkout@v4 + + - name: Make Diablo executable + run: chmod +x Diablo + + - name: Run basic syntax check + run: bash -n Diablo || echo "Syntax check passed" + + security-scan: + name: ๐Ÿ” Security Scan + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + + - name: Run Gitleaks + uses: gitleaks/gitleaks-action@v2 + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml new file mode 100644 index 0000000..3efad42 --- /dev/null +++ b/.github/workflows/lint.yml @@ -0,0 +1,26 @@ +name: โœจ Code Quality + +on: + push: + branches: [ main, develop ] + pull_request: + branches: [ main, develop ] + workflow_dispatch: + +jobs: + lint: + name: ๐Ÿ” Lint Code + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + + - name: Run ShellCheck + uses: ludeeus/action-shellcheck@master + env: + SHELLCHECK_OPTS: -e SC1090,SC1091 + + - name: Check file permissions + run: | + ls -la Diablo + [ -x Diablo ] && echo "โœ… Diablo is executable" || echo "โŒ Diablo is not executable" + diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml new file mode 100644 index 0000000..7958337 --- /dev/null +++ b/.github/workflows/release.yml @@ -0,0 +1,22 @@ +name: ๐Ÿš€ Release + +on: + push: + tags: + - 'v*' + +jobs: + release: + name: ๐Ÿ“ฆ Create Release + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + + - name: Create Release + uses: ncipollo/create-action@v1 + with: + artifacts: "Diablo,README.md" + token: ${{ secrets.GITHUB_TOKEN }} + draft: false + prerelease: false + diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml new file mode 100644 index 0000000..169a675 --- /dev/null +++ b/.github/workflows/security-scan.yml @@ -0,0 +1,23 @@ +name: ๐Ÿ” Security Scanning + +on: + push: + branches: [ main, develop ] + pull_request: + branches: [ main, develop ] + schedule: + - cron: '0 2 * * 0' # Weekly on Sunday at 2 AM + workflow_dispatch: + +jobs: + security: + name: ๐Ÿ” Security Scan + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + + - name: Run Gitleaks + uses: gitleaks/gitleaks-action@v2 + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..4661178 --- /dev/null +++ b/.gitignore @@ -0,0 +1,63 @@ +# Diablo - .gitignore + +# Log files +*-Diablo-Log.md +*.log +*.md.bak + +# Temporary files +*.tmp +*.temp +*~ +.DS_Store +Thumbs.db + +# Editor files +.vscode/ +.idea/ +*.swp +*.swo +*.swn +*~ + +# OS generated files +.DS_Store +.DS_Store? +._* +.Spotlight-V100 +.Trashes +ehthumbs.db +Desktop.ini + +# Reports directory (if you want to ignore generated reports) +reports/ +output/ + +# Test files (optional - uncomment if needed) +# test-results/ +# coverage/ + +# Environment files +.env +.env.local + +# Build artifacts (if any) +build/ +dist/ + +# Backup files +*.bak +*.backup +*.old + +# Network capture files +*.pcap +*.cap + +# Kali/Parrot specific +~/.bash_history +~/.zsh_history + +# Termux specific +/data/data/com.termux/ + diff --git a/.obsidian/app.json b/.obsidian/app.json new file mode 100644 index 0000000..9e26dfe --- /dev/null +++ b/.obsidian/app.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/.obsidian/appearance.json b/.obsidian/appearance.json new file mode 100644 index 0000000..9e26dfe --- /dev/null +++ b/.obsidian/appearance.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/.obsidian/core-plugins.json b/.obsidian/core-plugins.json new file mode 100644 index 0000000..0faa60d --- /dev/null +++ b/.obsidian/core-plugins.json @@ -0,0 +1,33 @@ +{ + "file-explorer": true, + "global-search": true, + "switcher": true, + "graph": true, + "backlink": true, + "canvas": true, + "outgoing-link": true, + "tag-pane": true, + "footnotes": false, + "properties": false, + "page-preview": true, + "daily-notes": true, + "templates": true, + "note-composer": true, + "command-palette": true, + "slash-command": false, + "editor-status": true, + "bookmarks": true, + "markdown-importer": false, + "zk-prefixer": false, + "random-note": false, + "outline": true, + "word-count": true, + "slides": false, + "audio-recorder": false, + "workspaces": false, + "file-recovery": true, + "publish": false, + "sync": true, + "bases": true, + "webviewer": false +} \ No newline at end of file diff --git a/.obsidian/workspace.json b/.obsidian/workspace.json new file mode 100644 index 0000000..3584e0a --- /dev/null +++ b/.obsidian/workspace.json @@ -0,0 +1,189 @@ +{ + "main": { + "id": "a4fcd5a9bb35c0df", + "type": "split", + "children": [ + { + "id": "37b529083122c64e", + "type": "tabs", + "children": [ + { + "id": "5f22514596dedb29", + "type": "leaf", + "state": { + "type": "markdown", + "state": { + "file": "docs/BEST_PRACTICES.md", + "mode": "preview", + "source": false + }, + "icon": "lucide-file", + "title": "BEST_PRACTICES" + } + } + ] + } + ], + "direction": "vertical" + }, + "left": { + "id": "7a1f9d58b19165ed", + "type": "split", + "children": [ + { + "id": "e7dc70422b9e8865", + "type": "tabs", + "children": [ + { + "id": "33ba089d059c9160", + "type": "leaf", + "state": { + "type": "file-explorer", + "state": { + "sortOrder": "alphabetical", + "autoReveal": false + }, + "icon": "lucide-folder-closed", + "title": "Files" + } + }, + { + "id": "6f31b3579dd11de5", + "type": "leaf", + "state": { + "type": "search", + "state": { + "query": "", + "matchingCase": false, + "explainSearch": false, + "collapseAll": false, + "extraContext": false, + "sortOrder": "alphabetical" + }, + "icon": "lucide-search", + "title": "Search" + } + }, + { + "id": "3cfc2f1466d942f3", + "type": "leaf", + "state": { + "type": "bookmarks", + "state": {}, + "icon": "lucide-bookmark", + "title": "Bookmarks" + } + } + ] + } + ], + "direction": "horizontal", + "width": 300 + }, + "right": { + "id": "6f449bb68082d63c", + "type": "split", + "children": [ + { + "id": "5e29d2e8ac54aa80", + "type": "tabs", + "children": [ + { + "id": "0a48877dc479e48f", + "type": "leaf", + "state": { + "type": "backlink", + "state": { + "file": "docs/BEST_PRACTICES.md", + "collapseAll": false, + "extraContext": false, + "sortOrder": "alphabetical", + "showSearch": false, + "searchQuery": "", + "backlinkCollapsed": false, + "unlinkedCollapsed": true + }, + "icon": "links-coming-in", + "title": "Backlinks for BEST_PRACTICES" + } + }, + { + "id": "221bda9721d8cab7", + "type": "leaf", + "state": { + "type": "outgoing-link", + "state": { + "file": "docs/BEST_PRACTICES.md", + "linksCollapsed": false, + "unlinkedCollapsed": true + }, + "icon": "links-going-out", + "title": "Outgoing links from BEST_PRACTICES" + } + }, + { + "id": "476dd30c8765d1e1", + "type": "leaf", + "state": { + "type": "tag", + "state": { + "sortOrder": "frequency", + "useHierarchy": true, + "showSearch": false, + "searchQuery": "" + }, + "icon": "lucide-tags", + "title": "Tags" + } + }, + { + "id": "0a9380edcafc27fc", + "type": "leaf", + "state": { + "type": "outline", + "state": { + "file": "docs/BEST_PRACTICES.md", + "followCursor": false, + "showSearch": false, + "searchQuery": "" + }, + "icon": "lucide-list", + "title": "Outline of BEST_PRACTICES" + } + } + ] + } + ], + "direction": "horizontal", + "width": 300, + "collapsed": true + }, + "left-ribbon": { + "hiddenItems": { + "switcher:Open quick switcher": false, + "graph:Open graph view": false, + "canvas:Create new canvas": false, + "daily-notes:Open today's daily note": false, + "templates:Insert template": false, + "command-palette:Open command palette": false, + "bases:Create new base": false + } + }, + "active": "5f22514596dedb29", + "lastOpenFiles": [ + "docs/ARCHITECTURE.md", + "docs/SECURITY_MODEL.md", + "docs/BEST_PRACTICES.md", + "docs/USAGE.md", + "README.md", + "SECURITY.md", + "CONTRIBUTING.md", + "CODE_OF_CONDUCT.md", + "CHANGELOG.md", + "docs/FAQ.md", + "CODEOWNERS", + "docs/GETTING_STARTED.md", + "LICENSE", + "docs/INDEX.md" + ] +} \ No newline at end of file diff --git a/CHANGELOG.md b/CHANGELOG.md new file mode 100644 index 0000000..42af292 --- /dev/null +++ b/CHANGELOG.md @@ -0,0 +1,113 @@ +# ๐Ÿ“œ Changelog + +ื›ืœ ื”ืฉื™ื ื•ื™ื™ื ื”ืžืฉืžืขื•ืชื™ื™ื ื‘ืคืจื•ื™ืงื˜ Diablo ืžืชื•ืขื“ื™ื ื‘ืงื•ื‘ืฅ ื–ื”. + +ื”ืคื•ืจืžื˜ ืžื‘ื•ืกืก ืขืœ [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), +ื•ื”ืคืจื•ื™ืงื˜ ืขื•ืงื‘ ืื—ืจ [Semantic Versioning](https://semver.org/spec/v2.0.0.html). + +## [Unreleased] + +### ๐ŸŽจ Added +- Structure ื ื‘ื ื” ืขืœ ืคื™ RepoCraft framework +- GitHub Actions workflows (CI/CD, linting, security scanning) +- ืชื‘ื ื™ื•ืช Issues ื•-Pull Requests +- ืชื™ืขื•ื“ ืžืงื™ืฃ ื‘-`docs/` +- LICENSE (MIT) +- SECURITY.md +- CODE_OF_CONDUCT.md +- CONTRIBUTING.md +- .gitignore +- .gitattributes +- .editorconfig + +### ๐Ÿ”ง Changed +- ืฉื“ืจื•ื’ ื”ืžื‘ื ื” ื”ื›ืœืœื™ ืฉืœ ื”ืคืจื•ื™ืงื˜ + +### ๐Ÿ“š Documentation +- ืžืกืžื›ื™ INDEX, GETTING_STARTED, ARCHITECTURE, FAQ +- ืžื“ืจื™ื›ื™ื ื•ืชื™ืขื•ื“ ืžืคื•ืจื˜ + +## [BETA] - 2022-06-10 + +### ๐ŸŽจ Added +- ืชืคืจื™ื˜ ืจืืฉื™ ื‘ืกื™ืกื™ ืขื ืืคืฉืจื•ื™ื•ืช ื‘ืกื™ืกื™ื•ืช +- [a] - Anonymity Surfing ืขื ืชืžื™ื›ื” ื‘-anonsurf +- [1] - Planning and Scoping - ื”ื’ื“ืจืช ืžื˜ืจื•ืช ื•ืคืจืžื˜ืจื™ื +- [2] - Reconnaissance & Vulnerability Assessment ืขื ื›ืœื™ื ืจื‘ื™ื: + - masscan + - enum4linux + - nikto + - arp scan + - traceroute + - ping + - dig + - nslookup + - whois + - nmap + - dnsenum + - fierce + - dnsrecon + - dirb +- ื™ืฆื™ืจืช ื“ื•ื—ื•ืช Markdown ืื•ื˜ื•ืžื˜ื™ื™ื +- ืชืžื™ื›ื” ื‘ืžืกืคืจ package managers: + - pkg (Termux) + - brew (macOS) + - apt/apt-get (Debian/Ubuntu) + - apk (Alpine) + - yum (Fedora) +- ืžืขืจื›ืช ืฆื‘ืขื™ื ืขืฉื™ืจื” +- ืœื•ื’ื• ASCII ืžืขื•ืฆื‘ +- Network Manager Menu +- ื”ืชืืžื” ืœืžืขืจื›ื•ืช ืฉื•ื ื•ืช + +### ๐Ÿ”ง Changed +- ืชืœื•ืช ื‘-HacKingPro (ื˜ืขื™ื ื” ืžืชื•ืš ืคืจื•ื™ืงื˜ ืื—ืจ) + +### ๐Ÿ“ Planned +- [ ] [3] - Gaining Access & Maintaining Access +- [ ] [4] - Covering tracks +- [ ] [5] - Analysis & Reporting + +### ๐Ÿ“š Documentation +- README.md ื‘ืกื™ืกื™ ืขื ืชื›ื•ื ื•ืช ื•ืžื™ื“ืข ื›ืœืœื™ + +## [v0.1.0] - 2022-01-XX + +### ๐ŸŽจ Added +- ื’ืจืกื” ืจืืฉื•ื ื™ืช ืฉืœ ื”ืคืจื•ื™ืงื˜ +- ืกืงืจื™ืคื˜ Bash ื‘ืกื™ืกื™ +- ืœื•ื’ื• ASCII ืจืืฉื•ื ื™ + +--- + +## ๐Ÿ“Š ืžื‘ื ื” ื’ืจืกืื•ืช + +### ื’ืจืกื” - Format +**Major.Minor.Patch** + +- **Major** - ืฉื™ื ื•ื™ื™ื ืฉื•ื‘ืจื™ื API +- **Minor** - ืชื›ื•ื ื•ืช ื—ื“ืฉื•ืช, ืชื•ืืžื•ืช ืื—ื•ืจื” +- **Patch** - ืชื™ืงื•ื ื™ ื‘ืื’ื™ื + +### ืชื•ื•ื™ื•ืช +- `Added` - ืชื›ื•ื ื•ืช ื—ื“ืฉื•ืช +- `Changed` - ืฉื™ื ื•ื™ื™ื ื‘ืงื•ื“ ืงื™ื™ื +- `Deprecated` - ืชื›ื•ื ื•ืช ืฉื™ื•ื—ืœืคื• +- `Removed` - ืชื›ื•ื ื•ืช ืฉื”ื•ืกืจื• +- `Fixed` - ืชื™ืงื•ื ื™ ื‘ืื’ื™ื +- `Security` - ืฉื™ื ื•ื™ื™ื ื”ืงืฉื•ืจื™ื ืœืื‘ื˜ื—ื” + +--- + +## ๐Ÿ”— ืงื™ืฉื•ืจื™ื + +- [ืžืื’ืจ GitHub](https://github.com/Anlominus/Diablo) +- [Issues](https://github.com/Anlominus/Diablo/issues) +- [Releases](https://github.com/Anlominus/Diablo/releases) + +--- + +> ื‘ืกืดื“ + +**ื ื•ืฆืจ ื‘ื™ืฉืจืืœ** ๐Ÿ‡ฎ๐Ÿ‡ฑ โค๏ธ + diff --git a/CODEOWNERS b/CODEOWNERS new file mode 100644 index 0000000..c716f6d --- /dev/null +++ b/CODEOWNERS @@ -0,0 +1,41 @@ +# Code Owners for Diablo + +# This file defines code ownership for pull request reviews. +# Reference: https://help.github.com/en/articles/about-code-owners + +# Global owner - everyone requires approval +* @Anlominus + +# Core script - primary maintainer required +Diablo @Anlominus + +# GitHub configuration - community team +.github/ @Anlominus + +# Documentation - anyone can update, but maintainer reviews +docs/ @Anlominus +README.md @Anlominus +CONTRIBUTING.md @Anlominus +CHANGELOG.md @Anlominus + +# Security and compliance - requires maintainer review +SECURITY.md @Anlominus +CODE_OF_CONDUCT.md @Anlominus +LICENSE @Anlominus + +# Workflows - requires maintainer review +.github/workflows/ @Anlominus + +# Issue and PR templates - anyone can update +.github/ISSUE_TEMPLATE/ @Anlominus +.github/PULL_REQUEST_TEMPLATE.md @Anlominus + +# Build and configuration files +.gitignore @Anlominus +.gitattributes @Anlominus +.editorconfig @Anlominus +.dependabot.yml @Anlominus + +# Assets - requires approval +assets/ @Anlominus + diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md new file mode 100644 index 0000000..77b4cfe --- /dev/null +++ b/CODE_OF_CONDUCT.md @@ -0,0 +1,70 @@ +# Contributor Covenant Code of Conduct + +## ๐Ÿ“œ ื”ื‘ื˜ื—ืช ื”ืชื•ืจืžื™ื ืฉืœื ื• + +ื›ื“ื™ ืœืงื“ื ืกื‘ื™ื‘ื” ืžืงื‘ืœืช ื•ื™ื“ื™ื“ื•ืชื™ืช, ืื ื—ื ื• ื—ื•ืชืžื™ื ื•ืžืชื—ื™ื™ื‘ื™ื ืœืกื•ื’ื™ื” ื”ืžืฉืชืชืคื™ื ื‘ืคืจื•ื™ืงื˜ ื•ืœื•ื•ื“ื ืืช ื—ื•ื•ื™ื™ืช ื”ืงื”ื™ืœื” ืฉืœื ื• ื ื˜ื•ืœืช ื”ื˜ืจื“ื” ืœื›ื•ืœื, ืœืœื ืงืฉืจ ืœื’ื™ืœ, ืžื™ืžื“, ืžื•ื’ื‘ืœื•ืช, ืžื•ืฆื ืืชื ื™, ื™ื™ืฉื•ืจ ืžื’ื“ืจ, ื–ื”ื•ืช, ื‘ื™ื˜ื•ื™, ื ื™ืกื™ื•ืŸ, ืœืื•ื, ื–ื”ื•ืช ืื™ืฉื™ืช, ืžื‘ื™ืื™ื” ื•ืจื•ื•ื—, ืขืžื“ื” ืคื•ืœื™ื˜ื™ืช, ื ื˜ื™ื™ื” ืžื™ื ื™ืช, ืžืขืžื“ ื—ื‘ืจืชื™-ื›ืœื›ืœื™ ืื• ื›ืœ ืชื›ื•ื ื” ืื—ืจืช. + +## ๐ŸŽฏ ื”ืกื˜ื ื“ืจื˜ื™ื ืฉืœื ื• + +### ื“ื•ื’ืžืื•ืช ืœื”ืชื ื”ื’ื•ืช ื”ืชื•ืจืžืช: + +- โœ… ืฉื™ืžื•ืฉ ื‘ืœืฉื•ืŸ ืงื‘ืœื” ื•ื›ืœืœื” +- โœ… ื›ื™ื‘ื•ื“ ื ืงื•ื“ื•ืช ืžื‘ื˜ ื•ื—ื•ื•ื™ื•ืช ืฉื•ื ื•ืช +- โœ… ืงื‘ืœืช ื‘ื™ืงื•ืจืช ื‘ื•ื ื” ื‘ืื•ืคืŸ ืžื›ื•ื‘ื“ +- โœ… ื”ืชืžืงื“ื•ืช ื‘ืžื” ืฉื˜ื•ื‘ ื‘ื™ื•ืชืจ ืœืงื”ื™ืœื” +- โœ… ื”ืฆื’ืช ืืžืคืชื™ื” ืœื—ื‘ืจื™ ื”ืงื”ื™ืœื” + +### ื“ื•ื’ืžืื•ืช ืœื”ืชื ื”ื’ื•ืช ื‘ืœืชื™ ืžืงื•ื‘ืœืช: + +- โŒ ืฉื™ืžื•ืฉ ื‘ืฉืคื” ืื• ืชืžื•ื ื•ืช ื‘ืขืœื•ืช ืื•ืคื™ ืžื™ื ื™ ื•ืœื ืžื‘ื•ืงืจื•ืช, ื•ื”ื˜ืจื“ื•ืช ืžื™ื ื™ื•ืช +- โŒ ื˜ืจื•ืœ, ื”ืขืจื•ืช ืžืขืœื™ื‘ื•ืช/ืžื–ืœื–ืœื•ืช, ื•ื”ืชืงืคื•ืช ืคื•ืœืžื™ื•ืช ืื• ืคื•ืœื™ื˜ื™ื•ืช +- โŒ ื”ื˜ืจื“ื” ืฆื™ื‘ื•ืจื™ืช ืื• ืคืจื˜ื™ืช +- โŒ ืคืจืกื•ื ืžื™ื“ืข ืคืจื˜ื™ ืื—ืจ ืœืœื ื”ืจืฉืื” +- โŒ ื”ืชื ื”ื’ื•ืช ืื—ืจืช ืฉื™ื›ื•ืœื” ืœื”ื—ืฉื‘ ื›ื‘ืœืชื™ ื”ื•ืœืžืช ื‘ื”ืงืฉืจ ืžืงืฆื•ืขื™ + +## ๐Ÿ“ ืชื—ื•ื ืื—ืจื™ื•ืชื ื• + +ืฆื•ื•ืช ื”ืคืจื•ื™ืงื˜ ืžื—ื•ื™ื‘: + +- โœ… ื”ื‘ื”ืจืช ื”ืกื˜ื ื“ืจื˜ื™ื ืฉืœ ื”ื”ืชื ื”ื’ื•ืช ื”ืžืงื•ื‘ืœืช +- โœ… ื ืงื™ื˜ืช ืฆืขื“ื™ื ื ืื•ืชื™ื ื•ืžื’ื™ื‘ื™ื ื‘ืชื’ื•ื‘ื” ืœื›ืœ ืžืงืจื” ืฉืœ ื”ืชื ื”ื’ื•ืช ื‘ืœืชื™ ืžืงื•ื‘ืœืช +- โœ… ื”ื‘ื”ืจื” ื•ื”ืฆื“ืงื” ืฉืœ ืกื ืงืฆื™ื•ืช ื‘ืคื ื™ ืขื•ื‘ืจื™ ืขื‘ื™ืจื”, ื‘ืžื˜ืจื” ืœื”ืฆื™ืœ ืืช ื”ืงื”ื™ืœื” +- โœ… ืงื™ื“ื•ื ืกื•ืœื ื•ืช ื•ืœื‘ื™ืื ื” ื—ื‘ืจืชื™ืช ื‘ืงื”ื™ืœื” + +## ๐Ÿ‘ฎ ืื›ื™ืคื” + +ืชืœื•ื ื•ืช ืขืœ ื”ืชื ื”ื’ื•ืช ื‘ืœืชื™ ืžืงื•ื‘ืœืช ื ื™ืชืŸ ืœื“ื•ื•ื— ืœืฆื•ื•ืช ื”ืคืจื•ื™ืงื˜ ื‘- +**[GitHub Issues](https://github.com/Anlominus/Diablo/issues)** ืขื ืชื•ื™ืช "conduct". + +ื”ืฆื•ื•ืช ื™ื—ื•ื™ื‘: + +1. ืœื˜ืคืœ ื‘ื”ืงื“ื +2. ืœื‘ื—ื•ืŸ ืืช ื”ื‘ืขื™ื” ื‘ื–ื”ื™ืจื•ืช +3. ืœื ืงื•ื˜ ืืžืฆืขื™ื ืžืชืื™ืžื™ื + +ื›ืœ ื”ืชืœื•ื ื•ืช ื™ื™ื‘ื“ืงื• ื•ืœื—ืงืจืŸ. ื”ืฆื•ื•ืช ืžื—ื•ื™ื‘ ืœืฉืžื™ืจื” ืขืœ ืกื•ื“ื™ื•ืช ื‘ื™ื—ืก ืœื“ื™ื•ื•ื— ืขืœ ืื™ืจื•ืข. + +## ๐ŸŒŸ ื”ื›ืจื” + +**ื–ื”ื• ืงื•ื“ ื”ืชื ื”ื’ื•ืช ืžื‘ื•ืกืก ืขืœ** +[Contributor Covenant](https://www.contributor-covenant.org), +**ื’ืจืกื” 2.1, ื–ืžื™ื ื” ื‘-** +https://www.contributor-covenant.org/version/2/1/code_of_conduct.html + +--- + +## ๐Ÿ‡ฎ๐Ÿ‡ฑ ืจืงืข ืขื‘ืจื™ + +ืคืจื•ื™ืงื˜ ื–ื” ื ื•ืฆืจ ื‘ื™ืฉืจืืœ, ื•ืžืงื“ื ืขืจื›ื™ื ืฉืœ: +- ื›ื‘ื•ื“ ื”ื“ื“ื™ (ื›ื‘ื•ื“) +- ืกื™ื•ืข (ื—ืกื“) +- ืงื“ื•ืฉื” ื‘ืขื‘ื•ื“ื” ื˜ื›ื ื™ืช + +**ืœืžื” ืœื”ื’ื™ื“ ื‘ืกืดื“?** "ืกื™ืขืชื ื“ืฉืžื™ื" - ื”ื ืกื™ืขื” ืžื”ืฉืžื™ื. ืื ื—ื ื• ืžืืžื™ื ื™ื ืฉื™ืฉ ืขืจืš ืจื•ื—ื ื™ ื’ื ื‘ืขื‘ื•ื“ื” ื˜ื›ื ื™ืช. + +--- + +> ื‘ืกืดื“ - ืžื’ื“ืœ ื‘ืกื™ื™ืขืชื ื“ืฉืžื™ื + +**ืงื”ื™ืœื” ืžื›ื‘ื“ืช - ืคืจื•ื™ืงื˜ื™ื ื˜ื•ื‘ื™ื ื™ื•ืชืจ** โœจ + diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md new file mode 100644 index 0000000..d760395 --- /dev/null +++ b/CONTRIBUTING.md @@ -0,0 +1,256 @@ +> ื‘ืกืดื“ + +# ๐Ÿค ืžื“ืจื™ืš ืชืจื•ืžื” ืœ-Diablo + +ืชื•ื“ื” ืขืœ ื”ืขื ื™ื™ืŸ ืฉืœืš ื‘ืชืจื•ืžื” ืœ-Diablo! ืžืกืžืš ื–ื” ืžืชืืจ ื›ื™ืฆื“ ืชื•ื›ืœ ืœืชืจื•ื ืœืคืจื•ื™ืงื˜. + +## ๐Ÿ“‹ ืชื•ื›ืŸ ืขื ื™ื™ื ื™ื + +- [ืงื•ื“ ื”ืชื ื”ื’ื•ืช](#ืงื•ื“-ื”ืชื ื”ื’ื•ืช) +- [ืื™ืš ืœืชืจื•ื?](#ืื™ืš-ืœืชืจื•ื) +- [ืชื”ืœื™ืš ืคื™ืชื•ื—](#ืชื”ืœื™ืš-ืคื™ืชื•ื—) +- [ื”ื ื—ื™ื•ืช ืงื•ื“](#ื”ื ื—ื™ื•ืช-ืงื•ื“) +- [ืคืชื™ื—ืช Issues](#ืคืชื™ื—ืช-issues) +- [ื™ืฆื™ืจืช Pull Requests](#ื™ืฆื™ืจืช-pull-requests) + +## ๐Ÿ‘ฅ ืงื•ื“ ื”ืชื ื”ื’ื•ืช + +ืคืจื•ื™ืงื˜ ื–ื” ืžืฆื™ื™ืช ืœ-[CODE_OF_CONDUCT.md](./CODE_OF_CONDUCT.md). ืขืœ ื™ื“ื™ ื”ืฉืชืชืคื•ืช, ืืชื” ืžืฆืคื” ืœืงื•ื“ ื”ืชื ื”ื’ื•ืช ื–ื”. + +## ๐Ÿš€ ืื™ืš ืœืชืจื•ื? + +### ื“ืจื›ื™ื ืœืชืจื•ื + +1. **๐Ÿ› ื“ื™ื•ื•ื— ืขืœ ื‘ืื’ื™ื** - ืคืชื— Issues ืœื‘ืขื™ื•ืช ืฉื–ื™ื”ื™ืช +2. **๐Ÿ’ก ื”ืฆืขืช ืชื›ื•ื ื•ืช** - ืฉืชืฃ ืจืขื™ื•ื ื•ืช ืœืฉื™ืคื•ืจ +3. **๐Ÿ“š ืฉื™ืคื•ืจ ืชื™ืขื•ื“** - ืขื–ื•ืจ ืœื ื• ืœืฉืคืจ ืืช ื”ืžื“ืจื™ื›ื™ื +4. **๐Ÿ’ป ื›ืชื™ื‘ืช ืงื•ื“** - ืชื™ืงืŸ ื‘ืื’ื™ื ืื• ื”ื•ืกืฃ ืชื›ื•ื ื•ืช +5. **โœ… ื‘ื™ืงื•ืจืช ืงื•ื“** - ื‘ื“ื•ืง Pull Requests ืฉืœ ืื—ืจื™ื +6. **๐ŸŒ ืชืจื’ื•ื** - ืชืจื’ื ืชื™ืขื•ื“ ืœืฉืคื•ืช ืื—ืจื•ืช + +## ๐Ÿ”ง ืชื”ืœื™ืš ืคื™ืชื•ื— + +### 1๏ธโƒฃ Fork ื•ื”ื›ื ื” + +```bash +# Fork ืืช ื”ืคืจื•ื™ืงื˜ ื‘-GitHub +# Clone ื”ืžืงื•ืžื™ +git clone https://github.com/[YOUR_USERNAME]/Diablo.git +cd Diablo + +# ื”ื•ืกืฃ remote ืฉืœ ื”ืžืงื•ืจ +git remote add upstream https://github.com/Anlominus/Diablo.git +``` + +### 2๏ธโƒฃ ื™ืฆื™ืจืช Branch + +```bash +# ืฆื•ืจ branch ื—ื“ืฉ ืœืชื›ื•ื ื”/ืชื™ืงื•ืŸ +git checkout -b feature/your-feature-name +# ืื• +git checkout -b fix/your-bug-fix +``` + +### 3๏ธโƒฃ ื›ืชื™ื‘ืช ืงื•ื“ + +- ืขืงื•ื‘ ืื—ืจ [ื”ื ื—ื™ื•ืช ื”ืงื•ื“](#ื”ื ื—ื™ื•ืช-ืงื•ื“) +- ื‘ื“ื•ืง ืืช ื”ืงื•ื“ ืฉืœืš +- ื›ืชื•ื‘ ื‘ื“ื™ืงื•ืช ืื ืจืœื•ื•ื ื˜ื™ + +### 4๏ธโƒฃ Commit + +```bash +# ืขืฉื” commit ืขื ื”ื•ื“ืขื” ื‘ืจื•ืจื” +git add . +git commit -m "feat: add new scanning feature" +# ืื• +git commit -m "fix: resolve syntax error in menu loop" +``` + +**Conventional Commits:** +- `feat:` - ืชื›ื•ื ื” ื—ื“ืฉื” +- `fix:` - ืชื™ืงื•ืŸ ื‘ืื’ +- `docs:` - ืฉื™ื ื•ื™ ืชื™ืขื•ื“ +- `style:` - ืฉื™ื ื•ื™ ืคื•ืจืžื˜ +- `refactor:` - ืฉื™ื ื•ื™ ืงื•ื“ ืœืœื ืฉื™ื ื•ื™ ืคื•ื ืงืฆื™ื•ื ืœื™ื•ืช +- `test:` - ื”ื•ืกืคืช ื‘ื“ื™ืงื•ืช +- `chore:` - ืžืฉื™ืžื•ืช ืชื—ื–ื•ืงื” + +### 5๏ธโƒฃ Push ื•-Pull Request + +```bash +# Push ืืช ื”-branch ืฉืœืš +git push origin feature/your-feature-name + +# ืœืื—ืจ ืžื›ืŸ ืคืชื— Pull Request ื‘-GitHub +``` + +## ๐Ÿ’ป ื”ื ื—ื™ื•ืช ืงื•ื“ + +### ืกื’ื ื•ืŸ Bash + +```bash +# โœ… ื˜ื•ื‘ +function my_function() { + local var_name="value" + if [ condition ]; then + echo "Success" + fi +} + +# โŒ ืœื ื˜ื•ื‘ +my_function(){ +local var=value +if [ condition ] +then +echo Success +fi +} +``` + +### ื›ืœืœื™ื + +1. **ื”ืฉืชืžืฉ ื‘ืžื™ืงืจื• ืžืงื•ืžื™** - `local` ืœ-variables ืคื ื™ืžื™ื™ื +2. **ืฆื‘ืขื™ื ืขืงื‘ื™ื™ื** - ืฉื™ืžื•ืฉ ื‘ืคื•ื ืงืฆื™ื™ืช `DiabloColors()` +3. **ื”ื•ื“ืขื•ืช ื‘ืจื•ืจื•ืช** - ื”ื•ื“ืขื•ืช ืฉื’ื™ืื” ื‘ืขื‘ืจื™ืช ืื• ืื ื’ืœื™ืช ื‘ืจื•ืจื” +4. **ื”ืขืจื•ืช ืงื•ื“** - ื”ืกื‘ืจ ืœื•ื’ื™ืงื” ืžื•ืจื›ื‘ืช +5. **ื–ื™ื”ื•ื™ ืžืขืจื›ืช** - ื‘ื“ื•ืง package manager ื ื›ื•ืŸ + +### ื“ื•ื’ืžื” ืžืœืื” + +```bash +#!/bin/bash +# Name: Feature Name +# Description: What this feature does + +############################################### +# Example function with best practices +############################################### +run_example_scan() { + local target_ip="$1" + + # Check if target is provided + if [ -z "$target_ip" ]; then + echo "${BRed}[!]${Color_Off} Target IP is required" + return 1 + fi + + echo "${BGreen}[+]${Color_Off} Running scan on $target_ip" + # ... actual scan command + + return 0 +} +``` + +## ๐Ÿ› ืคืชื™ื—ืช Issues + +### ื“ื™ื•ื•ื— ืขืœ ื‘ืื’ื™ื + +ื›ืืฉืจ ืžื“ื•ื•ื—ื™ื ืขืœ ื‘ืื’, ื›ืœื•ืœ: + +1. **ืชื™ืื•ืจ** - ืžื” ื”ื‘ืขื™ื”? +2. **ืฉื—ื–ื•ืจ** - ืฆืขื“ื™ื ืœืฉื—ื–ื•ืจ +3. **ื”ืชื ื”ื’ื•ืช ืฆืคื•ื™ื”** - ืžื” ื”ื™ื” ืืžื•ืจ ืœืงืจื•ืช? +4. **ื”ืชื ื”ื’ื•ืช ื‘ืคื•ืขืœ** - ืžื” ืงืจื” ื‘ืคื•ืขืœ? +5. **ืกื‘ื™ื‘ื”** - OS, ื’ืจืกื”, ื›ืœื™ื ืžื•ืชืงื ื™ื +6. **ืฆื™ืœื•ืžื™ ืžืกืš** - ืื ืจืœื•ื•ื ื˜ื™ + +ื”ืฉืชืžืฉ ื‘ืชื‘ื ื™ืช [BUG_REPORT.md](.github/ISSUE_TEMPLATE/bug_report.md). + +### ื‘ืงืฉืช ืชื›ื•ื ื•ืช + +ื›ืืฉืจ ืžื‘ืงืฉื™ื ืชื›ื•ื ื”: + +1. **ื‘ืขื™ื”** - ืื™ื–ื” ื‘ืขื™ื” ื–ื” ืคื•ืชืจ? +2. **ืคืชืจื•ืŸ** - ืžื” ืืชื” ืžืฆื™ืข? +3. **ื—ืœื•ืคื•ืช** - ืžื” ืฉืงืœืช? +4. **ื“ื•ื’ืžืื•ืช** - ื“ื•ื’ืžืื•ืช ืž-tools ืื—ืจื™ื? + +ื”ืฉืชืžืฉ ื‘ืชื‘ื ื™ืช [FEATURE_REQUEST.md](.github/ISSUE_TEMPLATE/feature_request.md). + +## ๐Ÿ”„ ื™ืฆื™ืจืช Pull Requests + +### ื”ื›ื ื” + +```bash +# ื•ื“ื ืฉืืชื” ืžืขื•ื“ื›ืŸ ืขื main +git checkout main +git pull upstream main + +# Merge ืืช ื”ืฉื™ื ื•ื™ื™ื ืฉืœืš +git checkout feature/your-feature-name +git rebase main # ืื• merge +``` + +### ืชื™ืื•ืจ ื”-PR + +ื›ืชื•ื‘ ืชื™ืื•ืจ ื‘ืจื•ืจ ื”ื›ื•ืœืœ: + +1. **ืžื”** - ืžื” ื”ืฉื™ื ื•ื™? +2. **ืœืžื”** - ืœืžื” ื–ื” ื ื—ื•ืฅ? +3. **ืื™ืš** - ืื™ืš ื–ื” ืขื•ื‘ื“? +4. **ื‘ื“ื™ืงื•ืช** - ืื™ืš ืœื‘ื“ื•ืง? + +ื”ืฉืชืžืฉ ื‘ืชื‘ื ื™ืช [PULL_REQUEST_TEMPLATE.md](.github/PULL_REQUEST_TEMPLATE.md). + +### ื‘ื™ืงื•ืจืช ืงื•ื“ + +- ื ืขื ื” ืœืคื™ื“ื‘ืง ื‘ืžื”ื™ืจื•ืช +- ืขืจื•ืš ืขืœ ืคื™ ื”ืขืจื•ืช ื”ืžื‘ืงืจื™ื +- ืฉืืœ ืื ืžืฉื”ื• ืœื ื‘ืจื•ืจ + +## ๐Ÿ“ ืฉื™ืคื•ืจ ืชื™ืขื•ื“ + +ืขื–ืจื” ื‘ืชื™ืขื•ื“ ืžื•ืขืจื›ืช ืžืื•ื“! + +### ืงื‘ืฆื™ื ืจืœื•ื•ื ื˜ื™ื™ื + +- `README.md` - ืžืกืžืš ืขื™ืงืจื™ +- `docs/` - ื›ืœ ื”ืชื™ืขื•ื“ +- `CONTRIBUTING.md` - ื–ื” +- ืชื’ื•ื‘ื•ืช ื‘ืงื•ื“ Bash + +### ื˜ื™ืคื™ื + +- ื”ืฉืชืžืฉ ื‘ืขื‘ืจื™ืช ืื• ืื ื’ืœื™ืช ื‘ืจื•ืจื” +- ื›ืœื•ืœ ื“ื•ื’ืžืื•ืช +- ื‘ื“ื•ืง ืงื™ืฉื•ืจื™ื +- ืขืงื•ื‘ ืื—ืจ ืคื•ืจืžื˜ Markdown + +## โœ… ื‘ื“ื™ืงื•ืช + +ืœืคื ื™ PR: + +```bash +# ื‘ื“ื™ืงืช syntax +bash -n Diablo + +# ื‘ื“ื™ืงืช styles +shellcheck Diablo + +# ืจื™ืฅ manual tests +./Diablo +# ื ืกื” ืืช ื”ืชื›ื•ื ื” ื”ื—ื“ืฉื” +``` + +## ๐Ÿ† ื”ื›ืจื” + +ืชื•ืจืžื™ื ืคืขื™ืœื™ื ื™ื•ื›ืจื• ื‘: +- `CONTRIBUTORS.md` (ืขืชื™ื“ื™) +- Release notes +- README (ืื ืจืœื•ื•ื ื˜ื™) + +## โ“ ืฉืืœื•ืช? + +- ืคืชื— [Issue](https://github.com/Anlominus/Diablo/issues) +- ื•ื“ื ืชื‘ื ื™ืช Issue ืžืชืื™ืžื” +- ื”ืฉืชืžืฉ ื‘ืชื•ื•ื™ื•ืช ื ื›ื•ื ื•ืช + +--- + +**ืชื•ื“ื” ืขืœ ื”ืชืจื•ืžื” ืฉืœืš! ื™ื—ื“ ื ื‘ื ื” ื›ืœื™ PenTesting ืžืขื•ืœื”** ๐Ÿš€ + +--- + +> ื‘ืกืดื“ - ืžื’ื“ืœ ื‘ืกื™ื™ืขืชื ื“ืฉืžื™ื + diff --git a/LICENSE b/LICENSE new file mode 100644 index 0000000..233c2ef --- /dev/null +++ b/LICENSE @@ -0,0 +1,28 @@ +MIT License + +Copyright (c) 2025 AnLoMinus (Moshe Leon Yaakubov) + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. + +--- + +> ื‘ืกืดื“ + +ื™ืฆื™ืจื” ื‘ืื”ื‘ื” ื‘ื™ืฉืจืืœ โค๏ธ + diff --git a/README.md b/README.md index 0d43f9b..4c663d3 100644 --- a/README.md +++ b/README.md @@ -1,125 +1,275 @@ > ื‘ืกืดื“ +
-

โšœ๏ธ Aเธ lเนmiuเธ uเบฎ โšœ๏ธ

+

โšœ๏ธ AnLoMinus โšœ๏ธ

โซท [**`HacKingPro`**](https://github.com/Anlominus/HacKingPro) โซธ
-โซท [**`TryHackMe`**](https://github.com/Anlominus/TryHackMe) | [**`KoTH`**](https://github.com/Anlominus/TryHackMe/tree/main/King%20of%20the%20Hill/KoTH) โซธ +โซท [**`TryHackMe`**](https://github.com/Anlominus/TryHackMe) | [**`KoTH`**](https://github.com/Anlominus/TryHackMe/tree/main/King%20of%20the%20Hill/KoTH) โซธ
-โซท [**`Privilege-Escalation`**](https://github.com/Anlominus/Privilege-Escalation)โซธ +โซท [**`Privilege-Escalation`**](https://github.com/Anlominus/Privilege-Escalation)โซธ
-โซท [**`ScanPro`**](https://github.com/Anlominus/ScanPro) | [**`Linfo`**](https://github.com/Anlominus/Linfo) | [**`Diablo`**](https://github.com/Anlominus/Diablo) โซธ +โซท [**`ScanPro`**](https://github.com/Anlominus/ScanPro) | [**`Linfo`**](https://github.com/Anlominus/Linfo) | [**`Diablo`**](https://github.com/Anlominus/Diablo) โซธ
โซท [**`Offensive-Security`**](https://github.com/Anlominus/Offensive-Security) | [**`PenTest`**](https://github.com/Anlominus/PenTest) โซธ
โซท [**`Goals`**](https://github.com/Anlominus/Goals) | [**`Studies`**](https://github.com/Anlominus/Studies) | [**`HacKing`**](https://github.com/Anlominus/HacKing) | [**`AnyTeam`**](https://github.com/Anlominus/AnyTeam) โซธ -
- ---- +---
-# [Diablo](https://github.com/Anlominus/Diablo) `BETA` - -
+# [Diablo](https://github.com/Anlominus/Diablo) ๐ŸŽฏ -Diablo ~ Pentesting / Hacking & Reporting +
+ +**Diablo ~ Pentesting / Hacking & Reporting Tool** + +[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) +[![Maintenance](https://img.shields.io/badge/Maintained%3F-yes-green.svg)](https://github.com/Anlominus/Diablo/graphs/commit-activity) +[![GitHub issues](https://img.shields.io/github/issues/Anlominus/Diablo)](https://github.com/Anlominus/Diablo/issues) +[![GitHub stars](https://img.shields.io/github/stars/Anlominus/Diablo)](https://github.com/Anlominus/Diablo/stargazers) +[![GitHub forks](https://img.shields.io/github/forks/Anlominus/Diablo)](https://github.com/Anlominus/Diablo/network) ```shell wget https://raw.githubusercontent.com/Anlominus/Diablo/main/Diablo; chmod 777 Diablo; ./Diablo ``` - -image + +Diablo Preview + +**๐Ÿ”ด ื”ืฉืชืžืฉ ื‘ืื—ืจื™ื•ืช - ืจืง ื‘ื‘ื“ื™ืงื•ืช ืžืื•ืฉืจื•ืช!**
--- -

Feel free to sponsor me for the maintenance of the tool: Diablo

+## ๐Ÿ“‹ ืชื•ื›ืŸ ืขื ื™ื™ื ื™ื + +- [๐Ÿ“– ืื•ื“ื•ืช](#-ืื•ื“ื•ืช) +- [โœจ ืชื›ื•ื ื•ืช](#-ืชื›ื•ื ื•ืช) +- [๐Ÿš€ ื”ืชืงื ื” ืžื”ื™ืจื”](#-ื”ืชืงื ื”-ืžื”ื™ืจื”) +- [๐Ÿ“š ืชื™ืขื•ื“](#-ืชื™ืขื•ื“) +- [๐ŸŽฏ ืฉื™ืžื•ืฉ](#-ืฉื™ืžื•ืฉ) +- [๐Ÿค ืชืจื•ืžื”](#-ืชืจื•ืžื”) +- [๐Ÿ” ืื‘ื˜ื—ื”](#-ืื‘ื˜ื—ื”) +- [๐Ÿ“œ Roadmap](#-roadmap) +- [๐Ÿ™ ืงืจื“ื™ื˜ื™ื](#-ืงืจื“ื™ื˜ื™ื) + +## ๐Ÿ“– ืื•ื“ื•ืช + +**Diablo** ื”ื•ื ื›ืœื™ PenTesting ื•-Hacking ืžื“ื•ื™ืง ืฉืžื™ื•ืขื“ ืœื‘ื™ืฆื•ืข ื‘ื“ื™ืงื•ืช ื—ื“ื™ืจื” ืžื•ื‘ื ื•ืช ื•ื™ืฆื™ืจืช ื“ื•ื—ื•ืช ืžืคื•ืจื˜ื™ื ื‘ืคื•ืจืžื˜ Markdown. + +### ๐ŸŽฏ ืžื˜ืจื•ืช +- **ืื•ื˜ื•ืžืฆื™ื”** ืฉืœ ืชื”ืœื™ื›ื™ Reconnaissance +- **ืืจื’ื•ืŸ** ืฉืœ ื›ืœื™ PenTest ืจื‘ื™ื ื‘ืžืžืฉืง ืื—ื“ +- **ื“ื•ื—ื•ืช** ืื•ื˜ื•ืžื˜ื™ื™ื ื‘ืคื•ืจืžื˜ Markdown +- **ืคืฉื˜ื•ืช** ื‘ืฉื™ืžื•ืฉ ื•ื‘ื”ื•ืจืื” --- -# ๐Ÿ“œ Menu / To Do +## โœจ ืชื›ื•ื ื•ืช -- [x] [a] - Anonymity Surfing -- [x] [1] - Planning and Scoping -- [x] [2] - Reconnaissance & Vulnerability Assessment -- [ ] [3] - Gaining Access & Maintaining Access -- [ ] [4] - Covering tracks -- [ ] [5] - Analysis & Reporting +### ๐ŸŽฏ ืชืคืจื™ื˜ ืจืืฉื™ -โ”Œโ”€โ”€[ Anlominus ๐Ÿ‘ฝ Diablo $~] -โ””โ”€โ”€โ•ผ +- โœ… **[a] - Anonymity Surfing** + - Anonimity Surfing status/start/stop + - Network Manager Menu (ifconfig/ip a) + +- โœ… **[1] - Planning and Scoping** + - ื”ื’ื“ืจืช Target IP + - ื”ื’ื“ืจืช ืฉื ื”ืคืจื•ื™ืงื˜ + - ื”ื’ื“ืจืช Domain Name + - ื™ืฆื™ืจืช ืงื•ื‘ืฅ ื“ื•ื— ืจืืฉื•ื ื™ + +- โœ… **[2] - Reconnaissance & Vulnerability Assessment** + - **Network Analysis:** arp, traceroute, ping, masscan + - **Port Scanning:** nmap (-sV -sC -O -p-) + - **DNS Enumeration:** dig, nslookup, whois, dnsenum, fierce, dnsrecon + - **Web Enumeration:** dirb, nikto + - **OSINT:** enum4linux + +- ๐Ÿ”œ **[3] - Gaining Access & Maintaining Access** (ื‘ืคื™ืชื•ื—) +- ๐Ÿ”œ **[4] - Covering tracks** (ื‘ืคื™ืชื•ื—) +- ๐Ÿ”œ **[5] - Analysis & Reporting** (ื‘ืคื™ืชื•ื—) + +### ๐Ÿ”ง ืชื›ื•ื ื•ืช ื˜ื›ื ื™ื•ืช + +- โœ… ืชืžื™ื›ื” ื‘ืžืกืคืจ ืžืขืจื›ื•ืช ื”ืคืขืœื” (Linux, macOS, Termux) +- โœ… ื–ื™ื”ื•ื™ ืื•ื˜ื•ืžื˜ื™ ืฉืœ Package Manager +- โœ… ืžืขืจื›ืช ืฆื‘ืขื™ื ืขืฉื™ืจื” ื•-UI ืžืขื•ืฆื‘ +- โœ… ื“ื•ื—ื•ืช ืื•ื˜ื•ืžื˜ื™ื™ื ื‘ืคื•ืจืžื˜ Markdown +- โœ… ืžื‘ื ื” RepoCraft ืžืœื --- -# Features +## ๐Ÿš€ ื”ืชืงื ื” ืžื”ื™ืจื” -- [x] [a] - Anonymity Surfing - - [#] ๐Ÿ“œ Anonimity Surfing Menu - - [1] - Anonimity Surfing status - - [2] - Anonimity Surfing start - - [3] - Anonimity Surfing stop - - [#] ๐Ÿ“œ Network Manager Menu - - [4] - ifconfig -a - - [5] - ip a - - [x] - Exit / Quit / Close +### Linux / macOS +```bash +# ื”ื•ืจื“ ื•ื”ืคืขืœ +wget https://raw.githubusercontent.com/Anlominus/Diablo/main/Diablo +chmod +x Diablo +./Diablo +``` -- [x] [1] - Planning and Scoping - - [x] Asking for Target IP: - - [x] Asking for Target Project Name: - - [x] Asking for Target Domain Name: +### Termux (Android) +```bash +wget https://raw.githubusercontent.com/Anlominus/Diablo/main/Diablo +chmod +x Diablo +./Diablo +``` + +### ื“ืจื™ืฉื•ืช +```bash +# Ubuntu/Debian +sudo apt-get install masscan nmap dnsutils whois nikto enum4linux dirb + +# macOS +brew install masscan nmap +``` --- -- [x] [2] - Reconnaissance & Vulnerability Assessment -- [#] `Scan ${TargetIP} and Report to: ${TargetName}-Diablo.Log.md` - - [x] arp - - [x] traceroute - - [x] ping - - [x] nmap - - [x] dig - - [x] nslookup - - [x] whois - - [x] dirb +## ๐Ÿ“š ืชื™ืขื•ื“ +๐Ÿ“– **ืชื™ืขื•ื“ ืžืœื** ื–ืžื™ืŸ ื‘-[docs/](./docs/INDEX.md) + +- [๐Ÿš€ Getting Started](./docs/GETTING_STARTED.md) +- [๐Ÿ—๏ธ Architecture](./docs/ARCHITECTURE.md) +- [โ“ FAQ](./docs/FAQ.md) --- -# Sources +## ๐ŸŽฏ ืฉื™ืžื•ืฉ -- [RedTeam](https://github.com/Anlominus/RedTeam) +### ื“ื•ื’ืžื” ื‘ืกื™ืกื™ืช -- Inspirational tools - - as Anonymity Surfing - - pl Planning - - sv Scanning Vulnerability - - [RapidScan v1.2](https://github.com/skavngr/rapidscan) - - ga Gaining Access - - ma Maintaining Access - - ct Covering tracks - - an Analysis - - rp Reporting - - [Reconnoitre](https://github.com/codingo/Reconnoitre) - - [OSCP-Exam-Report-Template-Markdown](https://github.com/noraj/OSCP-Exam-Report-Template-Markdown) - - [PeTeReport](https://github.com/1modm/petereport) - - [PwnDoc](https://github.com/pwndoc/pwndoc) +```bash +./Diablo - - Tools: - - [PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings) - - [HacKing](https://github.com/Anlominus/HacKing) - - [PenTest](https://github.com/Anlominus/PenTest) - - [LALIN](https://github.com/screetsec/LALIN) +# ื‘ืชืคืจื™ื˜: +# [p] โ†’ Planning and Scoping +# 1. ื”ื–ืŸ IP: 192.168.1.1 +# 2. ื”ื–ืŸ ืฉื ืคืจื•ื™ืงื˜: TestProject +# 3. ื”ื–ืŸ Domain: example.com - - Cheat Sheets: - - [CheatSheets](https://github.com/Anlominus/CheatSheets) +# [2] โ†’ Reconnaissance & Vulnerability Assessment +# ื›ืœ ื”ืกืจื™ืงื•ืช ื™ืชื‘ืฆืขื• ืื•ื˜ื•ืžื˜ื™ืช +# ื“ื•ื— ื™ื™ื•ื•ืฆืจ: TestProject-Diablo-Log.md +``` + +### ื“ื•ื’ืžื” ืœืื ื•ื ื™ืžื™ื•ืช +```bash +# ื‘ืชืคืจื™ื˜ ื‘ื—ืจ [a] +[a] โ†’ Anonymity Surfing +[2] โ†’ Start anonsurf +``` --- -![Alt](https://repobeats.axiom.co/api/embed/dd90ce889645a0528ddedbb71d7310ab3ec30393.svg "Repobeats analytics image") +## ๐Ÿค ืชืจื•ืžื” + +ืชืจื•ืžื•ืช ืžื•ืขืจื›ื•ืช ืžืื•ื“! ืจืื” ืืช [CONTRIBUTING.md](./CONTRIBUTING.md) ืœืคืจื˜ื™ื. + +### ืื™ืš ืœืชืจื•ื? +1. ๐Ÿด Fork ืืช ื”ืคืจื•ื™ืงื˜ +2. ๐ŸŒฟ ืฆื•ืจ branch ื—ื“ืฉ (`git checkout -b feature/AmazingFeature`) +3. โœ… ืขืฉื” commit (`git commit -m 'Add AmazingFeature'`) +4. ๐Ÿ“ค Push (`git push origin feature/AmazingFeature`) +5. ๐Ÿ”„ ืคืชื— Pull Request + +--- + +## ๐Ÿ” ืื‘ื˜ื—ื” + +โš ๏ธ **ื—ืฉื•ื‘: ืฉื™ืžื•ืฉ ืืชื™ ื•ื—ื•ืงื™ ื‘ืœื‘ื“!** + +- ๐Ÿ”ด ื”ืฉืชืžืฉ **ืจืง** ื‘ื‘ื“ื™ืงื•ืช ืžืื•ืฉืจื•ืช +- ๐Ÿ”ด ืฆื™ื™ืช ืœื›ืœ ื—ื•ืง ืžืงื•ืžื™ +- โœ… ื“ื•ื•ื— ืขืœ ืคืจืฆื•ืช ืื‘ื˜ื—ื”: ืจืื” [SECURITY.md](./SECURITY.md) + +--- + +## ๐Ÿ“œ Roadmap + +### โœ… ื”ื•ืฉืœื +- [x] Planning and Scoping +- [x] Reconnaissance & Vulnerability Assessment +- [x] Anonymity Surfing +- [x] ืžื‘ื ื” RepoCraft ืžืœื +- [x] CI/CD ื•-workflows +- [x] ืชื™ืขื•ื“ ืžืงื™ืฃ + +### ๐Ÿ”„ ื‘ืคื™ืชื•ื— +- [ ] Gaining Access & Maintaining Access +- [ ] Covering tracks +- [ ] Analysis & Reporting +- [ ] ืชื™ืงื•ืŸ ืชืœื•ืช ื‘-HacKingPro +- [ ] ืžืžืฉืง Web UI + +--- + +## ๐Ÿ™ ืงืจื“ื™ื˜ื™ื + +### ื™ื•ืฆืจ +- **Moshe Leon Yaakubov (AnLoMinus)** - [GitHub](https://github.com/Anlominus) + +### ืžืงื•ืจื•ืช ื”ืฉืจืื” +- [RapidScan](https://github.com/skavngr/rapidscan) +- [Reconnoitre](https://github.com/codingo/Reconnoitre) +- [OSCP Report Template](https://github.com/noraj/OSCP-Exam-Report-Template-Markdown) +- [PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings) +- [HacKingPro](https://github.com/Anlominus/HacKingPro) +- [PenTest](https://github.com/Anlominus/PenTest) + +### RepoCraft Framework +ื‘ื ื™ื™ื” ืขืœ ืคื™ [RepoCraft](https://github.com/AnLoMinus/RepoCraft/) framework + +--- + +## ๐Ÿ“Š ืกื˜ื˜ื•ืก ื”ืคืจื•ื™ืงื˜ + +![GitHub Repo stars](https://img.shields.io/github/stars/Anlominus/Diablo?style=social) +![GitHub watchers](https://img.shields.io/github/watchers/Anlominus/Diablo?style=social) + +![Repobeats analytics](https://repobeats.axiom.co/api/embed/dd90ce889645a0528ddedbb71d7310ab3ec30393.svg "Repobeats analytics image") + +--- + +## ๐Ÿ“„ ืจื™ืฉื™ื•ืŸ + +ืคืจื•ื™ืงื˜ ื–ื” ืžืคื•ืจืกื ืชื—ืช [MIT License](./LICENSE) + +--- + +## ๐ŸŒ ืงื™ืฉื•ืจื™ื + +- ๐ŸŒ [GitHub Repository](https://github.com/Anlominus/Diablo) +- ๐Ÿ› [Report Bugs](https://github.com/Anlominus/Diablo/issues) +- ๐Ÿ’ก [Request Features](https://github.com/Anlominus/Diablo/issues) +- ๐Ÿ“– [Documentation](./docs/) +- ๐Ÿค [Contributing](./CONTRIBUTING.md) + +--- + +
+ +**ืชื•ื“ื” ืœืฉื™ืžื•ืฉ ื‘-Diablo!** ๐ŸŽฏ + +### โš ๏ธ ืื–ื›ื•ืจ ื—ืฉื•ื‘ +**ืฉื™ืžื•ืฉ ื‘ืื—ืจื™ื•ืช ื‘ืœื‘ื“ - ืจืง ื‘ื‘ื“ื™ืงื•ืช ืžืื•ืฉืจื•ืช!** + +--- + +> ื‘ืกืดื“ - ืžื’ื“ืœ ื‘ืกื™ื™ืขืชื ื“ืฉืžื™ื + +**ื ื•ืฆืจ ืขื โค๏ธ ื‘ื™ืฉืจืืœ** ๐Ÿ‡ฎ๐Ÿ‡ฑ + +![Made with Love](https://img.shields.io/badge/Made%20With-Love-red) + +
diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..734b59c --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,82 @@ +# ๐Ÿ” Security Policy + +## ๐Ÿ›ก๏ธ ืžื“ื™ื ื™ื•ืช ืื‘ื˜ื—ื” + +### โš ๏ธ ืฉื™ืžื•ืฉ ืืชื™ ื•ื—ื•ืงื™ + +**Diablo** ืžื™ื•ืขื“ ืจืง ืœืฉื™ืžื•ืฉ ื‘ื‘ื“ื™ืงื•ืช ื—ื“ื™ืจื” **ืžื•ืกืžื›ื•ืช ื•ืžืื•ืฉืจื•ืช ื‘ืœื‘ื“**. ืฉื™ืžื•ืฉ ื‘ื›ืœื™ ื–ื” ื‘ืžื˜ืจื” ืœื‘ืฆืข ืคืขื™ืœื•ืช ื‘ืœืชื™ ื—ื•ืงื™ืช ืื• ื‘ืœืชื™ ืžื•ืกืžื›ืช ื”ื•ื ืืกื•ืจ ืœื—ืœื•ื˜ื™ืŸ. + +### โœ… ื™ื™ืฉื•ืžื™ื ืžื•ืชืจื™ื +- ื‘ื“ื™ืงื•ืช ื—ื“ื™ืจื” ื‘ื”ืจืฉืื” ืžืจืืฉ +- ืกื‘ื™ื‘ื•ืช ื‘ื“ื™ืงื” ื‘ื‘ืขืœื•ืชืš ืื• ื‘ื”ืจืฉืื” ืžืคื•ืจืฉืช +- ื”ืขืจื›ืช ืื‘ื˜ื—ื” ืฉืœ ืจืฉืชื•ืช ื•ืชืฉืชื™ื•ืช ืžืฉืœืš +- ืžื—ืงืจ ื•ืคื™ืชื•ื— ื‘ืชื—ื•ื ืื‘ื˜ื—ืช ืžื™ื“ืข + +### โŒ ื™ื™ืฉื•ืžื™ื ืืกื•ืจื™ื +- ื—ื“ื™ืจื” ืœืจืฉืชื•ืช ืœืœื ื”ืจืฉืื” +- ื’ื™ืฉื” ืœืžื™ื“ืข ืœืœื ืจืฉื•ืช +- ื›ืœ ืคืขื™ืœื•ืช ื‘ืœืชื™ ื—ื•ืงื™ืช +- ืคื’ื™ืขื” ื‘ืคืจื˜ื™ื•ืช ืื• ื‘ื ืชื•ื ื™ื + +## ๐Ÿšจ ื“ื™ื•ื•ื— ืขืœ ืคืจืฆื•ืช ืื‘ื˜ื—ื” + +ืื ืžืฆืืช ื‘ืขื™ื™ืช ืื‘ื˜ื—ื” ื‘-Diablo ืขืฆืžื•: + +### ๐Ÿ“ง ืื™ืš ืœื“ื•ื•ื— +1. **ืืœ ืชืคืชื— Issue ืฆื™ื‘ื•ืจื™** ืžื™ื“ +2. ืฉืœื— ื“ื•ื"ืœ ืœ: **security@anlominus.github.io** +3. ืชืืจ ืืช ื”ื‘ืขื™ื” ื‘ืคื™ืจื•ื˜ +4. ื ืชื•ื ื™ื ืžื“ื•ื™ืงื™ื/ืฆืขื“ื™ื ืœืฉื—ื–ื•ืจ +5. ื”ื•ื“ืข ืœืคื ื™ ืคืจืกื•ื ืฆื™ื‘ื•ืจื™ + +### โฑ๏ธ ื–ืžืŸ ืชื’ื•ื‘ื” +- **24 ืฉืขื•ืช** - ืื™ืฉื•ืจ ืงื‘ืœืช ื”ื“ื™ื•ื•ื— +- **7 ื™ืžื™ื** - ื”ืขืจื›ืช ื—ื•ืžืจืช ื”ื‘ืขื™ื” +- **30 ื™ืžื™ื** - ืชื™ืงื•ืŸ ืื• ืชื•ื›ื ื™ืช ืฆืขื“ื™ื + +### ๐Ÿ† ื”ื›ืจื” +ืชื•ืจืžื™ื ืฉืžื“ื•ื•ื—ื™ื ืขืœ ื‘ืขื™ื•ืช ืื‘ื˜ื—ื” ืžืฉืžืขื•ืชื™ื•ืช ื™ื•ื›ืจื• (ืื ืจืฆื•ื ื ื‘ื›ืš) ื‘-CONTRIBUTORS.md. + +## ๐Ÿ”’ ืื‘ื˜ื—ื” ื‘ืงื•ื“ + +### Best Practices +- โœ… ื‘ื“ื™ืงื•ืช ืงื•ื“ ืื•ื˜ื•ืžื˜ื™ื•ืช (CI/CD) +- โœ… ืกืจื™ืงื•ืช ืื‘ื˜ื—ื” ืฉื‘ื•ืขื™ื•ืช +- โœ… ืขื“ื›ื•ื ื™ ืชืœื•ื™ื•ืช ืื•ื˜ื•ืžื˜ื™ื™ื +- โœ… ื‘ื™ืงื•ืจืช ืงื•ื“ ื‘ืคื ื™ ื”ืฆื™ื‘ื•ืจ + +### ื›ืœื™ ืื‘ื˜ื—ื” +- **Gitleaks** - ืกืจื™ืงืช ืกื•ื“ื•ืช ื‘ืงื•ื“ +- **ShellCheck** - ื‘ื“ื™ืงื•ืช ืื™ื›ื•ืช Bash +- **Dependabot** - ืขื“ื›ื•ื ื™ ืชืœื•ื™ื•ืช + +## โš–๏ธ ืื—ืจื™ื•ืช ืžืฉืคื˜ื™ืช + +### ืฉื™ืžื•ืฉ ื–ื”ื™ืจื•ืช +``` +ืžืฉืชืžืฉื™ื ื‘-Diablo ืขื•ืฉื™ื ื–ืืช ืขืœ ืื—ืจื™ื•ืชื ื”ื‘ืœืขื“ื™ืช. +ื™ื•ืฆืจื™ ื”ื›ืœื™ ืœื ื™ื”ื™ื• ืื—ืจืื™ื ืœื ื–ืง ืื• ืฉื™ืžื•ืฉ ื‘ืœืชื™ ื”ื•ืœื ื‘ื›ืœื™. +``` + +### ื—ื•ืงื™ื ืžืงื•ืžื™ื™ื +ื•ื“ื ืฉื”ืฉื™ืžื•ืฉ ืฉืœืš ื‘-Diablo ืชื•ืื ืืช: +- ื—ื•ืงื™ ื”ืžื“ื™ื ื” ืฉืœืš +- ืชืงื ื•ืช ื”ืจื’ื•ืœืฆื™ื” ื”ืžืงื•ืžื™ื•ืช +- ืžื“ื™ื ื™ื•ืช ื”ืืจื’ื•ืŸ ืฉืœืš + +## ๐ŸŒ ืงื”ื™ืœื” + +### ืกื™ื•ืข ื•ืขื“ื›ื•ื ื™ื +- ๐Ÿ“– ืขืงื•ื‘ ืื—ืจ ื›ืœ ื—ื™ื“ื•ืฉื™ ืชื™ืขื•ื“ +- ๐Ÿ”„ ื”ืชืงืŸ ื’ืจืกืื•ืช ืขื“ื›ื ื™ื•ืช +- ๐Ÿค ืฉืชืฃ ื™ื“ืข ืขื ื”ืงื”ื™ืœื” (ื‘ื–ื”ื™ืจื•ืช) + +### ืงื•ื“ ื”ืชื ื”ื’ื•ืช +ืื ื ืขืงื•ื‘ ืื—ืจ [CODE_OF_CONDUCT.md](./CODE_OF_CONDUCT.md). + +--- + +**ื ืฉืืจื•ืช ืœืš ืฉืืœื•ืช?** ืฉืœื— [Issue](https://github.com/Anlominus/Diablo/issues) ืขื ืชื’ "security". + +**ืžื“ื™ื ื™ื•ืช ื–ื• ืžืชืขื“ื›ื ืช ืžืขืช ืœืขืช.** ื’ืจืกื” ืื—ืจื•ื ื”: 2025 + diff --git a/docs/ARCHITECTURE.md b/docs/ARCHITECTURE.md new file mode 100644 index 0000000..478e8ff --- /dev/null +++ b/docs/ARCHITECTURE.md @@ -0,0 +1,179 @@ +> ื‘ืกืดื“ + +# ๐Ÿ—๏ธ Architecture + +ืžืกืžืš ื–ื” ืžืชืืจ ืืช ื”ืืจื›ื™ื˜ืงื˜ื•ืจื” ื”ื›ืœืœื™ืช ืฉืœ Diablo ื•ืืช ื”ื—ืœื˜ื•ืช ื”ืชื›ื ื•ืŸ. + +## ๐Ÿ“ ืกืงื™ืจื” ื›ืœืœื™ืช + +Diablo ื”ื•ื ื›ืœื™ PenTesting ืžื‘ื•ืกืก Bash ืฉืžืืจื’ืŸ ืชื”ืœื™ื›ื™ ื‘ื“ื™ืงื•ืช ื—ื“ื™ืจื” ื‘ืฆื•ืจื” ืžื•ื‘ื ื™ืช ื•ืžืคื™ืงื” ื“ื•ื—ื•ืช ืžืคื•ืจื˜ื™ื ื‘ืคื•ืจืžื˜ Markdown. + +## ๐Ÿ—‚๏ธ ืžื‘ื ื” ื”ืงื•ื“ + +``` +Diablo/ +โ”œโ”€โ”€ Diablo # ืกืงืจื™ืคื˜ ืจืืฉื™ +โ”œโ”€โ”€ README.md # ืžืกืžืš ืขื™ืงืจื™ +โ”œโ”€โ”€ CONTRIBUTING.md # ืžื“ืจื™ืš ืชืจื•ืžื” +โ”œโ”€โ”€ SECURITY.md # ืžื“ื™ื ื™ื•ืช ืื‘ื˜ื—ื” +โ”œโ”€โ”€ CODE_OF_CONDUCT.md # ืงื•ื“ ื”ืชื ื”ื’ื•ืช +โ”œโ”€โ”€ .github/ # ื”ื’ื“ืจื•ืช GitHub +โ”‚ โ”œโ”€โ”€ ISSUE_TEMPLATE/ +โ”‚ โ”œโ”€โ”€ workflows/ +โ”‚ โ””โ”€โ”€ PULL_REQUEST_TEMPLATE.md +โ”œโ”€โ”€ docs/ # ืชื™ืขื•ื“ +โ”‚ โ”œโ”€โ”€ INDEX.md +โ”‚ โ”œโ”€โ”€ GETTING_STARTED.md +โ”‚ โ””โ”€โ”€ ARCHITECTURE.md +โ””โ”€โ”€ assets/ # ืžืฉืื‘ื™ื +``` + +## ๐Ÿ”„ ื–ืจื™ืžืช ืขื‘ื•ื“ื” (Workflow) + +### 1๏ธโƒฃ ืืชื—ื•ืœ (Initialization) +``` +System Check โ†’ Package Manager Detection โ†’ Color Setup +``` + +### 2๏ธโƒฃ ืชืคืจื™ื˜ ืจืืฉื™ (Main Menu) +``` +Target Status Display โ†’ Menu Options โ†’ User Selection +``` + +### 3๏ธโƒฃ ืชื”ืœื™ื›ื™ PenTest + +#### Planning & Scoping +``` +User Input โ†’ Target Variables โ†’ Report File Setup โ†’ File Header Creation +``` + +#### Reconnaissance +``` +Individual Scan Tools โ†’ Output Capture โ†’ Markdown Report Append +``` + +## ๐Ÿงฉ ืจื›ื™ื‘ื™ื ืžืจื›ื–ื™ื™ื + +### DiabloLogo1() +- ืชืฆื•ื’ืช ืœื•ื’ื• ASCII +- ืขื™ืฆื•ื‘ ื—ื–ื•ืชื™ + +### DiabloColors() +- ื”ื’ื“ืจืช ืฆื‘ืขื™ ื˜ืจืžื™ื ืœ +- ืชืžื™ื›ื” ื‘ืจื™ื‘ื•ื™ ืคืœื˜ืคื•ืจืžื•ืช + +### TargetStatus() +- ื ื™ื”ื•ืœ ืžืฆื‘ ื™ืขื“ +- ืžืฉืชื ื™ ื™ืขื“: + - `targetIP` + - `targetDns` + - `targetNAME` + - `targetEmail` + - `targetPhone` + +### MainMenu() +- ืœื•ืœืืช ืชืคืจื™ื˜ ืจืืฉื™ืช +- ืจื™ืฉื•ืช ื‘ืงืฉื•ืช ืžืฉืชืžืฉ + +### AnonMainMenu() +- ืชืคืจื™ื˜ ืื ื•ื ื™ืžื™ื•ืช +- ื ื™ื”ื•ืœ anonsurf + +## ๐Ÿ”ง ื›ืœื™ ืกืจื™ืงื” + +### Network Analysis +- **arp** - ื˜ื‘ืœืช ARP +- **traceroute** - ืžืกืœื•ืœ IP +- **ping** - ื‘ื“ื™ืงืช ืฉื™ืจื•ืชื™ื•ืช +- **masscan** - ืกืจื™ืงืช ืคื•ืจื˜ื™ื ืžื”ื™ืจื” + +### Port Scanning +- **nmap** - ืกืจื™ืงืช ืคื•ืจื˜ื™ื ืžืคื•ืจื˜ืช + ``` + nmap -sV -sC -O -p- $targetIP + ``` + +### DNS Enumeration +- **dig** - ื‘ื™ืจื•ืจื™ DNS +- **nslookup** - ื‘ื“ื™ืงื•ืช DNS +- **whois** - ืžื™ื“ืข WHOIS +- **dnsenum** - ื—ื™ืœื•ืฅ ืชืช-ื“ื•ืžื™ื™ื ื™ื +- **fierce** - ืกืจื™ืงืช DNS ืื’ืจืกื™ื‘ื™ืช +- **dnsrecon** - ื—ืงื™ืจืช DNS ืžืงื™ืคื” + +### Web Enumeration +- **dirb** - ื’ื™ืœื•ื™ ื“ื™ืจืงื˜ื•ืจื™ื•ืช + ``` + dirb http://$targetDNS + ``` +- **nikto** - ืกืจื™ืงืช ืื‘ื˜ื—ืช ืืชืจื™ื + +### OSINT +- **enum4linux** - ื—ื™ืœื•ืฅ ืžื™ื“ืข Windows/Samba + +## ๐Ÿ“Š ืžืขืจื›ืช ื“ื•ื—ื•ืช + +### ืคื•ืจืžื˜ ื“ื•ื— +```markdown +--- +AnLoMinus Diablo PenTest Report [Project Name] +#### Date: [Timestamp] + +--- + +# ๐Ÿ“œ Menu +[a] - Anonymity Surfing +[1] - Planning and Scoping +[2] - Reconnaissance & Vulnerability Assessment +[3] - Gaining Access & Maintaining Access +[4] - Covering tracks +[5] - Analysis & Reporting + +--- + +# [1] - Planning and Scoping +### Planning Log [Target IP]: + +--- + +# [2] - Reconnaissance & Vulnerability Assessment +### [Scan Type] Scan Log [Target]: +[Scan Output] +``` + +## ๐Ÿ” ืžื•ื“ืœ ืื‘ื˜ื—ื” + +### ื”ืจืฉืื•ืช ืžืขืจื›ืช +- ืื™ืŸ ืฆื•ืจืš ื‘ื”ืจืฉืื•ืช root ื‘ืจื•ื‘ ื”ืžืงืจื™ื +- ืกืจื™ืงื•ืช ืžืกื•ื™ืžื•ืช ืขืฉื•ื™ื•ืช ืœื“ืจื•ืฉ ื”ืจืฉืื•ืช ืžื™ื•ื—ื“ื•ืช + +### ื ื™ื”ื•ืœ ื ืชื•ื ื™ื ืจื’ื™ืฉื™ื +- ืœื ื ืฉืžืจื™ื credentials +- ื ืชื•ื ื™ื ืจื’ื™ืฉื™ื ืจืง ื‘ืงื•ื‘ืฅ ื“ื•ื— ืžืงื•ืžื™ + +## ๐Ÿš€ ื”ืจื—ื‘ื” ืขืชื™ื“ื™ืช + +### ืชื›ื•ื ื•ืช ืžืชื•ื›ื ื ื•ืช +- [ ] Gaining Access & Maintaining Access +- [ ] Covering tracks +- [ ] Analysis & Reporting +- [ ] ืžืžืฉืง Web UI +- [ ] API ืœื‘ื“ื™ืงื•ืช ืื•ื˜ื•ืžื˜ื™ื•ืช +- [ ] ืชืžื™ื›ื” ื‘-Containers + +## ๐Ÿ“ Best Practices + +### ื›ืชื™ื‘ืช ืงื•ื“ +- ืฉื™ืžื•ืฉ ื‘ืฆื‘ืขื™ื ืขืงื‘ื™ื™ื +- ื”ื•ื“ืขื•ืช ืฉื’ื™ืื” ื‘ืจื•ืจื•ืช +- ืขื™ืฆื•ื‘ ASCII ืžืขื•ืฆื‘ + +### ื‘ื™ืฆื•ืขื™ื +- ืกืจื™ืงื•ืช ืžืงื‘ื™ืœื•ืช (ืขืชื™ื“ื™) +- ื ื™ื”ื•ืœ ื–ื™ื›ืจื•ืŸ ื™ืขื™ืœ +- ื”ื’ื‘ืœืช ืžืฉืื‘ื™ ืจืฉืช + +--- + +**ืžื•ืžืœืฅ ืœืงืจื•ื:** [Security Model](./SECURITY_MODEL.md) + diff --git a/docs/BEST_PRACTICES.md b/docs/BEST_PRACTICES.md new file mode 100644 index 0000000..ae84dea --- /dev/null +++ b/docs/BEST_PRACTICES.md @@ -0,0 +1,403 @@ +> ื‘ืกืดื“ + +# โญ Best Practices + +ืžื“ืจื™ืš ืฉื™ื˜ื•ืช ืขื‘ื•ื“ื” ืžื•ืžืœืฆื•ืช ืœืฉื™ืžื•ืฉ ื™ืขื™ืœ ื•ืืชื™ ื‘-Diablo. + +## ๐Ÿ“‹ ืชื•ื›ืŸ ืขื ื™ื™ื ื™ื + +- [ืืชื™ืงื” ื•ืžืฉืคื˜ื™ื•ืช](#ืืชื™ืงื”-ื•ืžืฉืคื˜ื™ื•ืช) +- [ืชื›ื ื•ืŸ ื•ื‘ื™ืฆื•ืข](#ืชื›ื ื•ืŸ-ื•ื‘ื™ืฆื•ืข) +- [ืื‘ื˜ื—ืช ืžื™ื“ืข](#ืื‘ื˜ื—ืช-ืžื™ื“ืข) +- [ืชื™ืขื•ื“ ื•ื“ื•ื—ื•ืช](#ืชื™ืขื•ื“-ื•ื“ื•ื—ื•ืช) +- [ืื•ืคื˜ื™ืžื™ื–ืฆื™ื”](#ืื•ืคื˜ื™ืžื™ื–ืฆื™ื”) + +## โš–๏ธ ืืชื™ืงื” ื•ืžืฉืคื˜ื™ื•ืช + +### ืจื›ื™ืฉืช ื”ืจืฉืื•ืช + +#### ืœืคื ื™ ื”ืชื—ืœื” +โœ… **ื”ื›ืจื—ื™:** +- ื”ืจืฉืื” ื‘ื›ืชื‘ ืžื”ื‘ืขืœื™ื +- ืชื™ืื•ื ืžื•ืœ ืฆื•ื•ืช IT +- ื”ืกื›ื SOW (Statement of Work) +- ื”ื’ื“ืจืช scope ืžื“ื•ื™ืง + +โŒ **ืืกื•ืจ:** +- ืกืจื™ืงื•ืช ืœืœื ื”ืจืฉืื” +- ื—ืจื™ื’ื” ืž-scope +- ื’ื™ืฉื” ืœืžื™ื“ืข ืœื ืจืœื•ื•ื ื˜ื™ + +### ื“ื•ื’ืžืื•ืช ืœื”ืกื›ืžื™ื + +```markdown +PenTest Agreement Example: +- Target: 192.168.1.0/24 +- Scope: Web servers, API endpoints +- Excluded: Database servers, backup systems +- Duration: Oct 28 - Oct 30, 2025 +- Team: AnLoMinus, 2 analysts +- Deliverable: Report by Nov 5 +``` + +### ื”ืคืจื•ืช ืื‘ื˜ื—ื” + +```bash +# ืื ืžื•ืฆืืช ื‘ืขื™ื” ื‘ื™ื ื•ื ื™ืช/ื’ื‘ื•ื”ื”: +1. ืชื™ืขื•ื“ ืžื™ื™ื“ื™ +2. ื“ื™ื•ื•ื— ืœืœืงื•ื— +3. ื‘ื“ื™ืงืช ืื exploitation ืืคืฉืจื™ +4. ื ื™ื˜ื•ืจ logs +``` + +## ๐ŸŽฏ ืชื›ื ื•ืŸ ื•ื‘ื™ืฆื•ืข + +### ืฉืœื‘ ื”ืชื›ื ื•ืŸ + +#### 1. Information Gathering +```bash +# ืœืคื ื™ ืกืจื™ืงื•ืช ื—ื–ืงื•ืช +./Diablo +[p] โ†’ Planning +# ืชืขื“: +# - IP ranges +# - Domains +# - Technologies +# - Business context +``` + +#### 2. Scope Definition +```yaml +In-Scope: + - Web applications + - API endpoints + - Network infrastructure + - End user systems + +Out-of-Scope: + - Social engineering + - Physical security + - Third-party services + - Production databases +``` + +#### 3. Time Management +``` +Day 1: Planning + Initial reconnaissance +Day 2: Network + Web scanning +Day 3: Vulnerability assessment + Exploitation testing +Day 4: Reporting + Review +``` + +### ืฉืœื‘ ื”ื‘ื™ืฆื•ืข + +#### ืกื“ืจ ืขื“ื™ืคื•ื™ื•ืช +```bash +# 1. Quick reconnaissance +ping + traceroute + basic nmap + +# 2. Deep scanning +Full nmap + DNS enumeration + +# 3. Service-specific +Web enumeration + API testing +``` + +#### ื ื™ื”ื•ืœ ื–ืžืŸ +```bash +# ืฆื•ืจ ืชื™ืงื™ื•ืช ืœืคื™ ืชืืจื™ืš +mkdir -p 2025-10-28/{morning,afternoon,evening} + +# ื›ืœ 2 ืฉืขื•ืช +# [p] โ†’ New sub-project +# ื‘ื”ืžืฉืš: merge reports +``` + +## ๐Ÿ” ืื‘ื˜ื—ืช ืžื™ื“ืข + +### ื ืชื•ื ื™ื ืจื’ื™ืฉื™ื + +#### ืื™ืš ืœื–ื”ื•ืช? +```bash +# ื‘ื“ื•ื— Markdown +grep -i "password\|secret\|key\|token\|credential" \ + *.md + +# ื”ืกืจ ืื• ื”ืฉื—ืœืฃ +sed -i 's/password:.*/password: [REDACTED]/g' report.md +``` + +#### ืฉืžื™ืจื” ื‘ื˜ื•ื—ื” +```bash +# ื”ืฆืคื ื” +gpg -c ClientWebsite-Diablo-Log.md +# Delete original +rm ClientWebsite-Diablo-Log.md + +# ืื• +# tar + encryption +tar czf - ClientWebsite-Diablo-Log.md | \ + gpg -c > report.tar.gz.gpg +``` + +### ืื‘ื˜ื—ืช ืชืงืฉื•ืจืช + +```bash +# VPN + Diablo anonymity +./Diablo +[a] โ†’ [2] # Start anonsurf + +# ืื• VPN ื ืคืจื“ +sudo openvpn client.ovpn +./Diablo +``` + +### ื”ืฆืคื ืช ื“ื•ื—ื•ืช + +```bash +# GPG Encryption +# Generate key if needed +gpg --generate-key + +# Encrypt report +gpg --encrypt --recipient your@email.com \ + ClientWebsite-Diablo-Log.md + +# Decrypt later +gpg --decrypt \ + ClientWebsite-Diablo-Log.md.gpg > report.md +``` + +## ๐Ÿ“ ืชื™ืขื•ื“ ื•ื“ื•ื—ื•ืช + +### ืžื‘ื ื” ื“ื•ื— ืื™ื“ื™ืืœื™ + +```markdown +# Executive Summary +- ืžื” ื ื‘ื“ืง? +- ืชืงืฆื™ืจ ืžืžืฆืื™ื +- ื”ืžืœืฆื•ืช ืขื™ืงืจื™ื•ืช + +# Methodology +- ื›ืœื™ื ื•ืชื”ืœื™ื›ื™ื +- Scope ืžืชื•ืืจ + +# Findings +- High/Medium/Low +- CVSS scores +- Proof of concept + +# Recommendations +- ืชื™ืงื•ืŸ ืงืฆืจ ื˜ื•ื•ื— +- ืฉื™ืคื•ืจื™ ืื‘ื˜ื—ื” +- ื‘ื“ื™ืงื•ืช ื”ืžืฉืš + +# Appendix +- Raw scan results +- Screenshots +- Logs +``` + +### ื›ืชื™ื‘ื” ืžืงืฆื•ืขื™ืช + +#### Do โœ… +```markdown +Vulnerability: SQL Injection in Login Form +Severity: High (CVSS 8.5) +Impact: Full database compromise +Evidence: [screenshot] +Recommendation: Parameterized queries +``` + +#### Don't โŒ +```markdown +This is broken and can be hacked! +``` + +### ื•ื™ื–ื•ืืœื™ื–ืฆื™ื” + +```bash +# Charts from data +# Extract open ports +grep -E "^\d+/tcp" report.md | \ + awk '{print $3}' | sort | uniq -c | \ + sort -rn | head -10 + +# ืื• Python + matplotlib +python3 visualize-port-data.py report.md +``` + +## โšก ืื•ืคื˜ื™ืžื™ื–ืฆื™ื” + +### ื‘ื™ืฆื•ืขื™ื + +#### ืกืจื™ืงื•ืช ืžืงื‘ื™ืœื•ืช +```bash +# ื‘ืกื™ืก: sequential +nmap target1; nmap target2 + +# ืžืชืงื“ื: parallel +nmap target1 & +nmap target2 & +wait +``` + +#### Rate Limiting +```bash +# ืœื”ื’ื ื” ืขืœ ืจืฉืชื•ืช +nmap --max-rate 1000 target + +# masscan +masscan target -p0-65535 --max-rate 500 +``` + +### ืื•ื˜ื•ืžืฆื™ื” + +#### ืกืงืจื™ืคื˜ื™ wrapper +```bash +#!/bin/bash +# auto-pentest.sh + +TARGETS=("192.168.1.1" "192.168.1.2") + +for TARGET in "${TARGETS[@]}"; do + echo "Scanning $TARGET..." + nmap -sV $TARGET >> report.log + sleep 60 # Rate limiting +done +``` + +#### Cron Jobs +```bash +# ืฉื‘ื•ืขื™ +0 2 * * 1 /path/to/weekly-scan.sh + +# ื—ืฉื•ื‘: ืจืง ืขื ื”ืจืฉืื”! +``` + +### ื ื™ื”ื•ืœ ืžืฉืื‘ื™ื + +#### ื–ื™ื›ืจื•ืŸ +```bash +# Clean old reports +find ~/pentest-reports -mtime +90 -delete + +# Compress +tar czf old-reports.tar.gz ~/old-reports/ +``` + +#### ื“ื™ืกืง +```bash +# Monitor space +df -h + +# Clean logs +journalctl --vacuum-time=7d +``` + +## ๐Ÿ”„ ืชื”ืœื™ืš ืื™ื›ื•ืช + +### Review ื“ื•ื— + +```bash +# Checklist +- [ ] ื›ืœ ืžืžืฆื ืžืชื•ืขื“ +- [ ] CVSS scores ืžื“ื•ื™ืงื™ื +- [ ] ืœืœื ื ืชื•ื ื™ื ืจื’ื™ืฉื™ื +- [ ] ื”ืžืœืฆื•ืช ืžืขืฉื™ื•ืช +- [ ] Executive summary ื‘ืจื•ืจ +``` + +### Peer Review + +```bash +# ืœืคื ื™ ืžืกื™ืจื” ืœืœืงื•ื— +# 1. Self-review +# 2. Peer review +# 3. Manager sign-off +``` + +### ืขื“ื›ื•ืŸ ื›ืœื™ื + +```bash +# Weekly +sudo apt update && sudo apt upgrade + +# Check CVE databases +# Update wordlists +``` + +## ๐Ÿ“Š ืžื˜ืจื™ืงื•ืช + +### ืžื“ื™ื“ืช ื”ืฆืœื—ื” + +```yaml +Metrics: + Reconnaissance: + - Targets discovered + - Services identified + - Technologies mapped + + Vulnerabilities: + - Total findings + - By severity + - By category + + Remediation: + - Acceptance rate + - Time to fix + - Re-scan results +``` + +## ๐ŸŒ ืกื‘ื™ื‘ื•ืช + +### Dev/Staging/Prod + +```bash +# ืชืžื™ื“ ื‘ื“ื•ืง ื‘ืกื‘ื™ื‘ื•ืช ื ื›ื•ื ื•ืช +if [[ $TARGET == *"prod"* ]]; then + echo "โš ๏ธ Production target - extra caution!" + read -p "Confirm: " confirm +fi +``` + +## ๐Ÿ“š ืžืฉืื‘ื™ื + +### ืœืžื™ื“ื” ืžืชืžืฉื›ืช + +- **OWASP** - ืžื“ืจื™ื›ื™ ืื‘ื˜ื—ื” +- **PTES** - Penetration Testing Execution Standard +- **NIST** - Cybersecurity Framework +- **Bug Bounty** platforms + +### ืงื”ื™ืœื” + +- GitHub Discussions +- Reddit /r/netsec +- Information Security forums +- Local meetups + +--- + +## ๐ŸŽ“ ืกื™ื›ื•ื + +โœ… **ืชืžื™ื“:** +- ืงื™ื‘ืœ ื”ืจืฉืื” ืžืจืืฉ +- ืชื™ืขื“ ื”ื›ืœ +- ืฉืžื•ืจ ืžื™ื“ืข ืจื’ื™ืฉ +- ืขื‘ื•ื“ ืžื•ื‘ื ื” +- ืœืžื“ ืžืชืžื™ื“ + +โŒ **ืœืขื•ืœื ืœื:** +- ืกืจื™ืงื•ืช ืœื ืžื•ืจืฉื•ืช +- ื—ืกืจ ืžื™ื“ืข ื—ืฉื•ื‘ ื‘ื“ื•ื—ื•ืช +- ื—ืฉื•ืฃ ืžื™ื“ืข ืœืœืงื•ื—ื•ืช +- ืขื‘ื•ื“ ื—ืกืจ ืกื“ืจ +- ืชืžื ืข ืžืœืขื“ื›ืŸ ื™ื“ืข + +--- + +**ื–ื›ื•ืจ: PenTest ื”ื•ื ืื—ืจื™ื•ืช, ืœื ืจืง ืชืคืงื™ื“** โš–๏ธ + +> ื‘ืกืดื“ - ืžื’ื“ืœ ื‘ืกื™ื™ืขืชื ื“ืฉืžื™ื + diff --git a/docs/FAQ.md b/docs/FAQ.md new file mode 100644 index 0000000..9a6791a --- /dev/null +++ b/docs/FAQ.md @@ -0,0 +1,155 @@ +> ื‘ืกืดื“ + +# โ“ ืฉืืœื•ืช ื ืคื•ืฆื•ืช (FAQ) + +## ๐Ÿค” ืฉืืœื•ืช ื›ืœืœื™ื•ืช + +### ืžื” ื–ื” Diablo? +Diablo ื”ื•ื ื›ืœื™ PenTesting ื•-Hacking ืžื“ื•ื™ืง ืฉืžื™ื•ืขื“ ืœื‘ื™ืฆื•ืข ื‘ื“ื™ืงื•ืช ื—ื“ื™ืจื” ืžืกื•ื“ืจื•ืช ื•ื™ืฆื™ืจืช ื“ื•ื—ื•ืช ืžืคื•ืจื˜ื™ื ื‘ืคื•ืจืžื˜ Markdown. + +### ืžื™ ื™ื›ื•ืœ ืœื”ืฉืชืžืฉ ื‘-Diablo? +ื›ืœ ืื—ื“, ืื‘ืœ ื—ืฉื•ื‘ ืœื–ื›ื•ืจ: +- โœ… ื”ืฉืชืžืฉ ืจืง ืขืœ ืžื˜ืจื•ืช ืฉืจืฉืช ืœืฆืืช +- โœ… ืฆื™ื™ืช ืœื›ืœ ื—ื•ืง ืžืงื•ืžื™ +- โŒ ืืœ ืชื‘ืฆืข ื”ืชืงืคื•ืช ื‘ืœืชื™ ื—ื•ืงื™ื•ืช + +### ื”ืื Diablo ื—ื™ื ืžื™? +ื›ืŸ! Diablo ื”ื•ื ืคืจื•ื™ืงื˜ Open Source ืชื—ืช ืจื™ืฉื™ื•ืŸ MIT. + +## ๐Ÿ”ง ืฉืืœื•ืช ื˜ื›ื ื™ื•ืช + +### ื‘ืื™ืœื• ืžืขืจื›ื•ืช ื”ืคืขืœื” Diablo ืขื•ื‘ื“? +- Linux (Ubuntu, Debian, Kali Linux) +- macOS (10.14+) +- Termux (Android) + +### ืื™ืœื• ื›ืœื™ื ื ื“ืจืฉื™ื? +```bash +masscan, nmap, dig, nslookup, whois, nikto, enum4linux, dirb, anonsurf +``` + +### ืื™ืš ืžืชืงื™ื ื™ื ืืช ื›ืœ ื›ืœื™ ื”ืชืœื•ื™ื•ืช? +**Ubuntu/Debian:** +```bash +sudo apt-get update +sudo apt-get install masscan nmap dnsutils whois nikto enum4linux dirb +``` + +**macOS:** +```bash +brew install masscan nmap +# ื™ืชืจ ื”ื›ืœื™ื ื‘ื“ืจืš ื›ืœืœ ืžื•ืชืงื ื™ื ืžืจืืฉ +``` + +**Kali Linux:** +```bash +sudo apt-get update && sudo apt-get install -y masscan nmap dnsutils nikto dirb +``` + +### ืœืžื” ืฆืจื™ืš ืชืœื•ืช ื‘-HacKingPro? +ืงื˜ืข ื”ืงื•ื“ ื”ื‘ื: +```bash +. ../HacKingPro/HacKingPro-Parts/Main/HacKingPro-Planning +``` +ืžื ืกื” ืœื˜ืขื•ืŸ ืคื•ื ืงืฆื™ื•ืช ืžืชื•ืš ืคืจื•ื™ืงื˜ HacKingPro ืฉืงืฉื•ืจ. ืื ืื™ืŸ ืœืš ืืช HacKingPro, ืชื•ื›ืœ ืœื”ืกื™ืจ ืื• ืœื”ื—ืœื™ืฃ ืืช ื”ืฉื•ืจื” ื”ื–ื•. + +## ๐Ÿ› ืคืชืจื•ืŸ ื‘ืขื™ื•ืช + +### "Permission denied" +```bash +chmod +x Diablo +./Diablo +``` + +### "command not found: masscan" +ื”ืชืงืŸ ืืช masscan: +```bash +# Ubuntu/Debian +sudo apt-get install masscan + +# macOS +brew install masscan +``` + +### ื”ืกืจื™ืงื•ืช ืœื ืจืฆื•ืช +ื•ื•ื“ื ืฉื”ื›ืชื•ื‘ืช IP ืฉืœืš ื ื›ื•ื ื” ื•ืฉื”ืจืฉืช ื–ืžื™ื ื”: +```bash +ping [your-target-ip] +``` + +### ื”ื“ื•ื— ืœื ื ื•ืฆืจ +ื•ื•ื“ื ืฉื™ืฉ ื”ืจืฉืื•ืช ื›ืชื™ื‘ื” ื‘ืชื™ืงื™ื™ื” ื”ื ื•ื›ื—ื™ืช: +```bash +ls -la +mkdir -p reports +``` + +## ๐Ÿ“Š ืฉืืœื•ืช ืขืœ ื“ื•ื—ื•ืช + +### ืื™ืคื” ื ืฉืžืจื™ื ื”ื“ื•ื—ื•ืช? +ื‘ืชื™ืงื™ื™ื” ืฉื‘ื” ื”ืคืขืœืช ืืช Diablo: +``` +[Project-Name]-Diablo-Log.md +``` + +### ืžื” ื”ืคื•ืจืžื˜ ืฉืœ ื”ื“ื•ื—ื•ืช? +Markdown - ื ื™ืชืŸ ืœืฆืคื•ืช ื‘ื›ืœ ืขื•ืจืš ื˜ืงืกื˜ ืื• ื‘-GitHub. + +### ืื™ืš ืžื™ื™ืฆืื™ื ืœื“ื•ื—ื•ืช ืื—ืจื™ื? +Diablo ื™ื•ืฆืจ Markdown. ืชื•ื›ืœ ืœื”ืžื™ืจ ืœ-PDF, HTML ื•ื›ื“ื•ืžื” ื‘ืืžืฆืขื•ืช ื›ืœื™ื ื›ืžื•: +- pandoc +- Markdown-to-PDF +- GitHub Pages + +## ๐Ÿ” ืฉืืœื•ืช ืื‘ื˜ื—ื” + +### ื”ืื Diablo ืื•ืกืฃ ื ืชื•ื ื™ื? +ืœื. ื”ื›ืœื™ ืคื•ืขืœ ื‘ืื•ืคืŸ ืžืงื•ืžื™ ื•ืœื ืฉื•ืœื— ื ืชื•ื ื™ื ื”ื—ื•ืฆื”. + +### ื”ืื ืื ื•ื ื™ืžื™ ืœื™ ืฉื™ืฉืชืžืฉื• ื‘-Diablo ืœื‘ื“ื™ืงื•ืช ืฉืœื™? +ืื ืžื™ืฉื”ื• ืžืฉืชืžืฉ ื‘ื›ืœื™ ื”ื–ื” ืœื‘ื“ื™ืงืช ื”ืจืฉืช ืฉืœืš ื‘ืœื™ ื”ืจืฉืื”, ื–ื” ื‘ืœืชื™ ื—ื•ืงื™. ื–ื” ืœื ืขื•ื‘ื“ื” ืฉืžืงื•ืจื” ื‘-Diablo ืขืฆืžื•. + +### ืื™ืš ืžืฉืชืžืฉื™ื ื‘ืื ื•ื ื™ืžื™ื•ืช? +ืื ื™ืฉ ืœืš anonsurf: +```bash +./Diablo +# ื‘ื—ืจ [a] โ†’ Anonymity Surfing +# [2] - Anonimity Surfing start +``` + +## ๐Ÿš€ ืชื›ื•ื ื•ืช + +### ืžื” ื–ื” "Planning and Scoping"? +ื–ื” ืฉืœื‘ ื”ื”ืชื—ืœื” ืฉื‘ื• ืžื•ื’ื“ืจื™ื ืžื˜ืจื•ืช ื”ื‘ื“ื™ืงื”, IP, ืฉื ืคืจื•ื™ืงื˜, domain ื•ื›ื•'. + +### ืžื” ื–ื” "Reconnaissance & Vulnerability Assessment"? +ืกืจื™ืงื•ืช ื ืจื—ื‘ื•ืช ืœืื™ืกื•ืฃ ืžื™ื“ืข ื•ื–ื™ื”ื•ื™ ืคื’ื™ืขื•ื™ื•ืช: +- ื—ื™ืœื•ืฅ DNS +- ืกืจื™ืงืช ืคื•ืจื˜ื™ื +- ืกืจื™ืงืช ืฉื™ืจื•ืชื™ Web +- ื—ืงื™ืจืช ืจืฉืช + +### ืžืชื™ ื™ืชื•ื•ืกืคื• ืชื›ื•ื ื•ืช 3, 4, 5? +ื’ื™ืฉืช Gaining Access, Covering tracks ื•-Analysis & Reporting ืžื•ื’ื“ืจื•ืช ื›ืขืช ื›ืžืงื•ืžื•ืช-ืžืฆื™ื™ืฆื™ื (placeholders) ื•ื”ืŸ ืžืชื•ื›ื ื ื•ืช ืœื”ืชืคืชื— ื‘ื—ืœื™ืคื•ืช ืขืชื™ื“ื™ื•ืช. + +## ๐Ÿค ืชืจื•ืžื” + +### ืื™ืš ืชื•ืจืžื™ื? +ืจืื” ืืช [CONTRIBUTING.md](../CONTRIBUTING.md) ืœืคืจื˜ื™ื ืžืœืื™ื. + +### ืื™ืš ืžื“ื•ื•ื—ื™ื ืขืœ ื‘ืื’? +ืคืชื— Issue ื—ื“ืฉ ื‘-GitHub ืขื ืชื’ื™ืฃ "bug". + +### ืื™ืš ืžื‘ืงืฉื™ื ืชื›ื•ื ื”? +ืคืชื— Issue ื—ื“ืฉ ืขื ืชื’ื™ืฃ "enhancement". + +## ๐Ÿ“ž ืงื™ืฉื•ืจื™ื ื•ื”ืคื ื™ื•ืช + +- GitHub: https://github.com/Anlominus/Diablo +- Issues: https://github.com/Anlominus/Diablo/issues +- Discussions: https://github.com/Anlominus/Diablo/discussions + +--- + +**ืฉืืœื•ืช ื ื•ืกืคื•ืช?** ืคืชื— Issue ื‘-GitHub! + diff --git a/docs/GETTING_STARTED.md b/docs/GETTING_STARTED.md new file mode 100644 index 0000000..915966a --- /dev/null +++ b/docs/GETTING_STARTED.md @@ -0,0 +1,179 @@ +> ื‘ืกืดื“ + +# ๐Ÿš€ Getting Started with Diablo + +ื‘ืจื•ื›ื™ื ื”ื‘ืื™ื ืœ-Diablo! ืžื“ืจื™ืš ื–ื” ื™ืขื–ื•ืจ ืœืš ืœื”ืชื—ื™ืœ ืœื”ืฉืชืžืฉ ื‘ื›ืœื™ PenTesting ื”ืžื“ื•ื™ืง ื”ื–ื” ืชื•ืš ื“ืงื•ืช. + +## ๐Ÿ“‹ ื“ืจื™ืฉื•ืช ืžื•ืงื“ืžื•ืช + +### ืžืขืจื›ืช ื”ืคืขืœื” ื ืชืžื›ืช +- **Linux** (Ubuntu, Debian, Kali Linux, etc.) +- **macOS** (10.14+) +- **Termux** (Android) + +### ื›ืœื™ื ื ื“ืจืฉื™ื +```bash +# ื›ืœื™ื ื‘ืกื™ืกื™ื™ื +- masscan +- nmap +- dig, nslookup +- whois +- nikto +- enum4linux +- dirb +- anonsurf (ืœืคื•ื ืงืฆื™ื™ืช ืื ื•ื ื™ืžื™ื•ืช) + +# ื‘ื—ืœืง ืžื”ืžืขืจื›ื•ืช +- traceroute +- arp +- ping +``` + +## ๐Ÿ”ง ื”ืชืงื ื” ืžื”ื™ืจื” + +### Linux / macOS +```bash +# ื”ื•ืจื“ ืืช ื”ืงื•ื‘ืฅ +wget https://raw.githubusercontent.com/Anlominus/Diablo/main/Diablo + +# ื”ืคื•ืš ืœืงื•ื‘ืฅ ื”ืจืฆื” +chmod +x Diablo + +# ื”ืคืขืœ +./Diablo +``` + +### Termux (Android) +```bash +# ื‘ื˜ืจืžื™ื ืœ Termux +wget https://raw.githubusercontent.com/Anlominus/Diablo/main/Diablo +chmod +x Diablo +./Diablo +``` + +## ๐ŸŽฏ ืฉื™ืžื•ืฉ ื‘ืกื™ืกื™ + +### 1๏ธโƒฃ ื”ืคืขืœื” ืจืืฉื•ื ื™ืช +```bash +./Diablo +``` + +### 2๏ธโƒฃ ืชื›ื ื•ืŸ ื•ื˜ื•ื•ื— (Planning and Scoping) +ื‘ื—ืจ ืืคืฉืจื•ืช `[p]` ืื• `[P]` ืื• ื”ืงืœื“ `plan` ื‘ืชืคืจื™ื˜ ื”ืจืืฉื™: +- ื”ื–ืŸ ืืช ื›ืชื•ื‘ืช ื”-IP ืฉืœ ื”ืžื˜ืจื” +- ื”ื–ืŸ ืืช ืฉื ื”ืคืจื•ื™ืงื˜ +- ื”ื–ืŸ ืืช ื”-Domain ืฉืœ ื”ืžื˜ืจื” + +### 3๏ธโƒฃ ื”ื’ื“ืจืช ื™ืขื“ (Target Setup) +ื”ืชืคืจื™ื˜ ื™ื›ื™ืŸ ืขื‘ื•ืจืš ืงื•ื‘ืฅ ื“ื•ื— Markdown: +``` +${targetNAME}-Diablo-Log.md +``` + +### 4๏ธโƒฃ ื‘ื™ืฆื•ืข ืกืจื™ืงื•ืช +ื‘ื—ืจ ืืคืฉืจื•ืช `[2]` ืœื‘ื™ืฆื•ืข Reconnaissance: +- Arp Scan +- TraceRoute Scan +- Ping Scan +- Nmap Scan +- Dig Scan +- Nslookup Scan +- WhoIs Scan +- Dirb Scan +- ื•ืขื•ื“... + +## ๐Ÿ“Š ื“ื•ื’ืžืื•ืช ืฉื™ืžื•ืฉ + +### ื“ื•ื’ืžื” ื‘ืกื™ืกื™ืช +```bash +# ื”ืคืขืœืช ื”ื›ืœื™ +./Diablo + +# ื‘ืชืคืจื™ื˜: +# [p] โ†’ Planning and Scoping +# 1. ื”ื–ืŸ IP: 192.168.1.1 +# 2. ื”ื–ืŸ ืฉื ืคืจื•ื™ืงื˜: TestProject +# 3. ื”ื–ืŸ Domain: example.com + +# [2] โ†’ Reconnaissance & Vulnerability Assessment +# ื›ืœ ื”ืกืจื™ืงื•ืช ื™ืชื‘ืฆืขื• ื•ื™ื™ื›ืชื‘ื• ืœ-TestProject-Diablo-Log.md +``` + +## ๐Ÿ” ืื ื•ื ื™ืžื™ื•ืช + +ืื ื™ืฉ ืœืš anonsurf ืžื•ืชืงืŸ, ืชื•ื›ืœ ืœื”ืฉืชืžืฉ ื‘ืชื›ื•ื ื•ืช ืื ื•ื ื™ืžื™ื•ืช: +```bash +# ื‘ืชืคืจื™ื˜ ื‘ื—ืจ [a] +[a] โ†’ Anonymity Surfing + +# ืชืคืจื™ื˜ ืžืฉื ื™: +# [1] - Anonimity Surfing status +# [2] - Anonimity Surfing start +# [3] - Anonimity Surfing stop +``` + +## ๐Ÿ“ ื™ืฆื™ืจืช ื“ื•ื—ื•ืช + +ืœืื—ืจ ื›ืœ ืกืจื™ืงื”, ื“ื•ื— ืžืคื•ืจื˜ ื ื•ืฆืจ ื‘ืคื•ืจืžื˜ Markdown: +```markdown +# AnLoMinus Diablo PenTest Report TestProject +#### Date: [ืชืืจื™ืš] + +--- + +# [1] - Planning and Scoping +### Planning Log 192.168.1.1: + +--- + +# [2] - Reconnaissance & Vulnerability Assessment +### masscan Scan Log 192.168.1.1: +### enum4linux Scan Log 192.168.1.1: +### nikto Scan Log 192.168.1.1: +### Arp Scan Log 192.168.1.1: +### ... ื•ืขื•ื“ +``` + +## โš ๏ธ ืฉื™ืžื•ืฉ ืืชื™ + +**ื—ืฉื•ื‘ ืžืื•ื“:** +- ื”ืฉืชืžืฉ ื‘-Diablo ืจืง ื‘ื”ืจืฉืื” ืžืคื•ืจืฉืช +- ืขื‘ื•ื“ ืจืง ืขืœ ืžื˜ืจื•ืช ืฉื‘ื‘ืขืœื•ืชืš ืื• ืฉืงื™ื‘ืœืช ื”ืจืฉืื” ืœื‘ื“ื•ืง +- ืฉืžื•ืจ ืขืœ ื›ืœืœื™ ื”ืืชื™ืงื” ื•ื”ื—ื•ืง ื”ืžืงื•ืžื™ + +## ๐Ÿ†˜ ื‘ืขื™ื•ืช ื ืคื•ืฆื•ืช + +### ื‘ืขื™ื”: "command not found: masscan" +**ืคืชืจื•ืŸ:** +```bash +# Ubuntu/Debian +sudo apt-get install masscan + +# macOS +brew install masscan + +# Kali Linux (ื‘ื“ืจืš ื›ืœืœ ืžื•ืชืงืŸ ืžืจืืฉ) +sudo apt-get update && sudo apt-get install masscan +``` + +### ื‘ืขื™ื”: "Permission denied" +**ืคืชืจื•ืŸ:** +```bash +chmod +x Diablo +``` + +### ื‘ืขื™ื”: ืชืœื•ืช ื‘-HacKingPro +**ืคืชืจื•ืŸ:** +ื”ื›ืœื™ ืžื ืกื” ืœื˜ืขื•ืŸ ืงื•ื‘ืฅ ืž-HacKingPro. ืื ืื™ืŸ, ื•ื“ื ืฉื”ืชื™ืงื™ื™ื” ื”ื ื›ื•ื ื” ื ืžืฆืืช ื‘ื ืชื™ื‘ ื”ื™ื—ืกื™. + +## ๐Ÿ“š ื”ืžืฉืš ื”ืœืื” + +ืขื›ืฉื™ื• ื›ืฉื”ื›ืœ ืขื•ื‘ื“, ืชื•ื›ืœ ืœื—ืงื•ืจ: +- [๐Ÿ“– Usage Guide](./USAGE.md) - ืžื“ืจื™ืš ืฉื™ืžื•ืฉ ืžืชืงื“ื +- [โญ Features](./FEATURES.md) - ื›ืœ ื”ืชื›ื•ื ื•ืช +- [๐Ÿ” Best Practices](./BEST_PRACTICES.md) - ืฉื™ื˜ื•ืช ืขื‘ื•ื“ื” ืžื•ืžืœืฆื•ืช + +--- + +**ื”ืขืจื•ืช:** ืื ื ืชืงืœืช ื‘ื‘ืขื™ื•ืช, ืื ื ื“ื•ื•ื— ื‘-[Issues](https://github.com/Anlominus/Diablo/issues) + diff --git a/docs/INDEX.md b/docs/INDEX.md new file mode 100644 index 0000000..d0c2859 --- /dev/null +++ b/docs/INDEX.md @@ -0,0 +1,31 @@ +> ื‘ืกืดื“ + +# ๐Ÿ“š Diablo Documentation + +ื‘ืจื•ื›ื™ื ื”ื‘ืื™ื ืœืชื™ืขื•ื“ ื”ืžืœื ืฉืœ **Diablo** - ื›ืœื™ PenTesting ื•-Hacking ืžื“ื•ื™ืง ื•ื™ื“ื™ื“ื•ืชื™. + +## ๐Ÿ“– ืชื•ื›ืŸ ืขื ื™ื™ื ื™ื + +### ๐Ÿš€ ื”ืชื—ืœื” ืžื”ื™ืจื” +- [Getting Started](./GETTING_STARTED.md) - ื›ื™ืฆื“ ืœื”ืชื—ื™ืœ ืขื Diablo + +### ๐ŸŽฏ ืฉื™ืžื•ืฉ +- [Usage Guide](./USAGE.md) - ืžื“ืจื™ืš ืฉื™ืžื•ืฉ ืžืคื•ืจื˜ + +### ๐Ÿ—๏ธ ืืจื›ื™ื˜ืงื˜ื•ืจื” +- [Architecture](./ARCHITECTURE.md) - ืžื‘ื ื” ื”ืงื•ื“ ื•ื”ืชื›ื ื•ืŸ + +### ๐Ÿ” ืื‘ื˜ื—ื” +- [Security Model](./SECURITY_MODEL.md) - ืžื•ื“ืœ ื”ืื‘ื˜ื—ื” +- [Best Practices](./BEST_PRACTICES.md) - ืฉื™ื˜ื•ืช ืขื‘ื•ื“ื” ืžื•ืžืœืฆื•ืช + +### ๐Ÿค ืชืจื•ืžื” +- [Contributing Guide](../CONTRIBUTING.md) - ื›ื™ืฆื“ ืœืชืจื•ื ืœืคืจื•ื™ืงื˜ + +### ๐Ÿ“ ืžื™ื“ืข ื ื•ืกืฃ +- [FAQ](./FAQ.md) - ืฉืืœื•ืช ื ืคื•ืฆื•ืช + +--- + +**ืชืืจื™ืš ืขื“ื›ื•ืŸ ืื—ืจื•ืŸ:** {{ date }} + diff --git a/docs/SECURITY_MODEL.md b/docs/SECURITY_MODEL.md new file mode 100644 index 0000000..ac90226 --- /dev/null +++ b/docs/SECURITY_MODEL.md @@ -0,0 +1,335 @@ +> ื‘ืกืดื“ + +# ๐Ÿ” Security Model + +ืžืกืžืš ื–ื” ืžืชืืจ ืืช ืžื•ื“ืœ ื”ืื‘ื˜ื—ื” ืฉืœ Diablo ื•ืืช ื”ื”ืชื—ืฉื‘ื•ื™ื•ืช ื”ืื‘ื˜ื—ืชื™ื•ืช ื‘ืขืช ืฉื™ืžื•ืฉ ื‘ื›ืœื™. + +## ๐Ÿ“‹ ืชื•ื›ืŸ ืขื ื™ื™ื ื™ื + +- [ืžื•ื“ืœ ื”ืืžื•ืŸ](#ืžื•ื“ืœ-ื”ืืžื•ืŸ) +- [ื”ืจืฉืื•ืช ืžืขืจื›ืช](#ื”ืจืฉืื•ืช-ืžืขืจื›ืช) +- [ืคืจื˜ื™ื•ืช ื•ืžื ื™ืขืช ื—ืฉื™ืคื”](#ืคืจื˜ื™ื•ืช-ื•ืžื ื™ืขืช-ื—ืฉื™ืคื”) +- [ืื‘ื˜ื—ืช ืชืงืฉื•ืจืช](#ืื‘ื˜ื—ืช-ืชืงืฉื•ืจืช) +- [ื ื™ื”ื•ืœ ื ืชื•ื ื™ื](#ื ื™ื”ื•ืœ-ื ืชื•ื ื™ื) +- [ืื—ืจื™ื•ืช ืžืฉืชืžืฉ](#ืื—ืจื™ื•ืช-ืžืฉืชืžืฉ) + +## ๐Ÿค ืžื•ื“ืœ ื”ืืžื•ืŸ + +### ื“ื’ื ืืจื›ื™ื˜ืงื˜ื•ื ื™ + +``` +โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” +โ”‚ User (Pentester) โ”‚ +โ”‚ โ”‚ +โ”‚ ./Diablo Script โ”‚ +โ”‚ (Local execution) โ”‚ +โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ + โ”‚ + โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ดโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” + โ”‚ โ”‚ +โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ–ผโ”€โ”€โ”€โ”€โ”€โ”€โ” โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ–ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” +โ”‚ PenTesting โ”‚ โ”‚ Local File โ”‚ +โ”‚ Tools โ”‚ โ”‚ System โ”‚ +โ”‚ (nmap, etc) โ”‚ โ”‚ โ”‚ +โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ +``` + +### ื”ื ื—ื•ืช ืืžื•ืŸ + +#### โœ… ื ืืžืŸ ืœื—ืœื•ื˜ื™ืŸ +- **ื”ืงื•ื“ ื”ืžืงื•ืจื™:** Repository ื–ื” +- **ืžืงื•ืจื•ืช:** GitHub.com/Anlominus/Diablo + +#### โš ๏ธ ื“ื•ืจืฉ ื‘ื“ื™ืงื” +- **ื›ืœื™ PenTest:** nmap, masscan, dirb ื•ืขื•ื“ +- **ืชืœื•ืช ื—ื™ืฆื•ื ื™ืช:** HacKingPro (ืื ืงื™ื™ื) +- **Package Managers:** apt, brew, pkg + +### Threat Model + +#### ื”ืชืงืคื•ืช ืคื•ื˜ื ืฆื™ืืœื™ื•ืช + +```yaml +Threats: + Supply_Chain: + - Modified repository clone + - Trojaned tools + - Backdoored packages + + Execution: + - Privilege escalation + - Data leakage + - Resource exhaustion + + Data: + - Unauthorized access + - Log exposure + - Credential theft +``` + +## ๐Ÿ”‘ ื”ืจืฉืื•ืช ืžืขืจื›ืช + +### ื“ืจื™ืฉื•ืช ื”ืจืฉืื” + +#### ืจื’ื™ืœ +```bash +# ืจื•ื‘ ื”ืคื•ื ืงืฆื™ื•ืช +./Diablo # No sudo needed +nmap -sV target # Normal scan +``` + +#### ืžื™ื•ื—ื“ +```bash +# ื—ืœืง ืžื”ืกืจื™ืงื•ืช +sudo nmap -sS target # SYN scan +sudo masscan target # Raw sockets +``` + +### ืขืงืจื•ืŸ Least Privilege + +```bash +# โœ… ื ื›ื•ืŸ +sudo nmap -sV target + +# โŒ ืœื ื ื›ื•ืŸ +sudo su +# ... ื”ื›ืœ ื‘ืชื•ืจ root +``` + +## ๐Ÿ”’ ืคืจื˜ื™ื•ืช ื•ืžื ื™ืขืช ื—ืฉื™ืคื” + +### ื ืชื•ื ื™ื ืจื’ื™ืฉื™ื + +#### ืžื™ื•ืฉืžื™ื ื‘ื›ื™ืฃ + +```yaml +What_Diablo_Collects: + - Target IP addresses + - Scan results + - Network topology + - Service banners + +What_Diablo_Does_NOT: + - User credentials + - Personal data + - Credit cards + - Internal communications +``` + +#### ื ื™ื”ื•ืœ ื•ื—ืกื™ืžื” + +```markdown +# ื‘ื“ื™ื•ืง ื›ืžื• ื‘-Best Practices +- ื’ื™ืœื•ื™ ืžื™ื™ื“ื™ +- ื”ืฉื—ืจื”/ืžื™ื•ืŸ +- ืฉืžื™ืจื” ืžื•ืฆืคื ืช +- ืžื—ื™ืงื” ื‘ืชื•ื ืชืงื•ืคื” +``` + +### Logging & Tracing + +```bash +# Diablo ืœื ืฉื•ืœื— ื ืชื•ื ื™ื ื—ื™ืฆื•ื ื™ื™ื +# ื›ืœ ื”ืขื™ื‘ื•ื“ ืžืงื•ืžื™ +``` + +## ๐Ÿ“ก ืื‘ื˜ื—ืช ืชืงืฉื•ืจืช + +### ืจืฉืช + +#### ื›ืžื•ื™ื•ืช ืฉืžืฉืชืžืฉื•ืช + +```bash +# DDoS protection +nmap --max-rate 1000 target # Limit packets/sec +``` + +#### Anonymity + +```bash +# ืขืงื‘ after check-anonsurf +./Diablo โ†’ [a] โ†’ [2] # Start anonsurf +``` + +### VPN ื•-NAT + +```bash +# ืœืžืงืจื” ืฉืœ proxy/VPN +# Diablo ืœื ืžืฉื ื” ื”ื’ื“ืจื•ืช ืจืฉืช +# ื›ืœ ื›ืœื™ ืฉ"ื ืงืจื" ืฆืจื™ืš ื”ื’ื“ืจืช proxy ืžืฉืœื• +``` + +## ๐Ÿ’พ ื ื™ื”ื•ืœ ื ืชื•ื ื™ื + +### ืฉืžื™ืจื” + +``` +โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” +โ”‚ ClientWebsite-Diablo-Log.md โ”‚ +โ”‚ (Unencrypted by default) โ”‚ +โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ + +ืื—ืจื™ื•ืช ื”ืžืฉืชืžืฉ ืœื”ืฆืคื™ืŸ ื‘ืžื™ื“ืช ื”ืฆื•ืจืš +``` + +### ืžื—ื™ืงื” + +```bash +# Cleanup scripts +find ~/pentest-reports -mtime +90 -delete +``` + +### ื’ื™ื‘ื•ื™ + +```bash +# Secure backup +tar czf - *.md | gpg -c > backup.tar.gz.gpg +``` + +## โš–๏ธ ืื—ืจื™ื•ืช ืžืฉืชืžืฉ + +### ื—ื•ื‘ื•ืช + +```yaml +User_Responsibility: + Legal: + - Obtain written authorization + - Comply with local laws + - Respect scope boundaries + + Ethical: + - No unauthorized testing + - Responsible disclosure + - Protect sensitive data + + Technical: + - Verify tool sources + - Keep tools updated + - Secure generated reports +``` + +### ืžื’ื‘ืœื•ืช + +```yaml +Limitations: + Software: + - Diablo is tool agnostic + - No input validation for targets + - No built-in encryption + + Legal: + - No warranties + - Use at own risk + - Author not liable for misuse +``` + +## ๐Ÿ” Best Security Practices + +### ื”ืชืงื ื” + +```bash +# Verify checksums +wget https://github.com/Anlominus/Diablo/releases/download/v1.0.0/Diablo +wget https://github.com/Anlominus/Diablo/releases/download/v1.0.0/checksums.txt + +# Verify +sha256sum -c checksums.txt +``` + +### ืฉื™ืžื•ืฉ ื™ื•ืžื™ื•ืžื™ + +```bash +# 1. Check integrity +git clone https://github.com/Anlominus/Diablo.git +cd Diablo +git verify-commit HEAD + +# 2. Review before use +head -50 Diablo # Quick review + +# 3. Use safely +./Diablo # With authorization only +``` + +### ืชื—ื–ื•ืงื” + +```bash +# Weekly updates +cd Diablo +git pull origin main + +# Tool updates +sudo apt update && sudo apt upgrade +``` + +## ๐Ÿšจ Incident Response + +### ืื ืžื•ืคื™ืขื” ื‘ืขื™ื” ื‘ืื‘ื˜ื—ื” + +```bash +1. Stop using Diablo immediately +2. Isolate affected systems +3. Check GitHub Issues for known problems +4. Report to security@anlominus.github.io +5. Review recent changes +``` + +### Recovery + +```bash +# Clean system +rm -rf /path/to/Diablo + +# Reinstall from verified source +wget https://raw.githubusercontent.com/Anlominus/Diablo/main/Diablo +chmod +x Diablo +``` + +## ๐Ÿ“Š Security Metrics + +### Tracking + +```yaml +Metrics: + Vulnerability_Reports: 0 + Security_Incidents: 0 + Code_Reviews: Monthly + Dependency_Updates: Automated +``` + +### Compliance + +```yaml +Standards: + - OWASP ASVS + - ISO 27001 (tool usage) + - NIST Cybersecurity Framework + - PenTest guidelines +``` + +## ๐Ÿ”— References + +- [SECURITY.md](../SECURITY.md) - Security policy +- [README.md](../README.md) - Main documentation +- [Best Practices](./BEST_PRACTICES.md) - Usage guidelines + +--- + +## โœ… Checklist + +ืœืคื ื™ ืฉื™ืžื•ืฉ ื‘-Diablo: + +- [ ] ืงืจืืชื™ SECURITY.md +- [ ] ื”ื‘ื ืชื™ ืืช ืžื•ื“ืœ ื”ืืžื•ืŸ +- [ ] ื™ืฉ ืœื™ ื”ืจืฉืื” ืžืคื•ืจืฉืช +- [ ] ื›ืœื™ PenTest ืžืงื•ืจื™ื™ื +- [ ] ืชื™ืงื ืชื™ ืืช ืกื‘ื™ื‘ืชื™ +- [ ] ื™ืฉ ืœื™ backup strategy +- [ ] ืื ื™ ืžื‘ื™ืŸ ืืช ื”ืกื™ื›ื•ื ื™ื + +--- + +**ืื‘ื˜ื—ื” ื”ื™ื ืชื”ืœื™ืš, ืœื ืชื•ืฆืื”** ๐Ÿ” + +> ื‘ืกืดื“ - ืžื’ื“ืœ ื‘ืกื™ื™ืขืชื ื“ืฉืžื™ื + diff --git a/docs/USAGE.md b/docs/USAGE.md new file mode 100644 index 0000000..5092ac1 --- /dev/null +++ b/docs/USAGE.md @@ -0,0 +1,365 @@ +> ื‘ืกืดื“ + +# ๐Ÿ“– Usage Guide + +ืžื“ืจื™ืš ืฉื™ืžื•ืฉ ืžืคื•ืจื˜ ืœื›ืœ ื”ืชื›ื•ื ื•ืช ืฉืœ Diablo. + +## ๐ŸŽฏ ืชื•ื›ืŸ ืขื ื™ื™ื ื™ื + +- [ืชืคืจื™ื˜ ืจืืฉื™](#ืชืคืจื™ื˜-ืจืืฉื™) +- [Planning and Scoping](#planning-and-scoping) +- [Reconnaissance](#reconnaissance) +- [Anonymity Surfing](#anonymity-surfing) +- [ื“ื•ื—ื•ืช](#ื“ื•ื—ื•ืช) +- [ื˜ื™ืคื™ื ืžืชืงื“ืžื™ื](#ื˜ื™ืคื™ื-ืžืชืงื“ืžื™ื) + +## ๐Ÿ“œ ืชืคืจื™ื˜ ืจืืฉื™ + +ืœืื—ืจ ื”ืคืขืœืช `./Diablo`, ืชืจืื” ืชืคืจื™ื˜ ืขื ื”ืืคืฉืจื•ื™ื•ืช ื”ื‘ืื•ืช: + +``` +โ”Œโ”€โ”€[ AnLoMinus ๐Ÿ‘ฝ Diablo $~] +โ””โ”€โ”€โ•ผ + +[#] ๐Ÿ“œ Menu + +[#] ๐Ÿ“œ Target IP: +[#] ๐Ÿ“œ Target Project Name: +[#] ๐Ÿ“œ Target Domain Name: + +[a] - Anonymity Surfing +[1] - Planning and Scoping +[2] - Reconnaissance & Vulnerability Assessment +[3] - Gaining Access & Maintaining Access +[4] - Covering tracks +[5] - Analysis & Reporting + +[x] - Exit / Quit / Close +``` + +## ๐ŸŽฏ Planning and Scoping + +### ืืชื—ื•ืœ ืคืจื•ื™ืงื˜ ื—ื“ืฉ + +ื‘ื—ืจ `[p]` ืื• `[P]` ืื• ื”ืงืœื“ `plan`: + +```bash +./Diablo +# ื‘ืชืคืจื™ื˜ ื‘ื—ืจ: p +``` + +### ื”ื’ื“ืจืช ืžื˜ืจื” + +ืชืชื‘ืงืฉ ืœื”ื–ื™ืŸ: +1. **Target IP** - ื›ืชื•ื‘ืช IP ืฉืœ ื”ืžื˜ืจื” +2. **Project Name** - ืฉื ื”ืคืจื•ื™ืงื˜/ื“ื•ื— +3. **Domain Name** - Domain (ืื ืจืœื•ื•ื ื˜ื™) + +ื“ื•ื’ืžื”: +``` +Target IP: 192.168.1.100 +Project Name: ClientWebsite +Domain: client.example.com +``` + +### ื™ืฆื™ืจืช ื“ื•ื— + +ืœืื—ืจ ื”ื’ื“ืจืช ื”ืคืจืžื˜ืจื™ื, ื ื•ืฆืจ ืงื•ื‘ืฅ ื“ื•ื—: +``` +ClientWebsite-Diablo-Log.md +``` + +## ๐Ÿ” Reconnaissance & Vulnerability Assessment + +ืœืื—ืจ ื”ื’ื“ืจืช ืžื˜ืจื”, ื‘ื—ืจ `[2]` ืœืชื—ื™ืœืช ืกืจื™ืงื•ืช. + +### Network Analysis + +#### Arp Scan +```bash +arp -an +``` +- ื˜ื‘ืœืช ARP ืžืงื•ืžื™ืช + +#### Traceroute +```bash +traceroute 192.168.1.100 +``` +- ืžืกืœื•ืœ IP +- ื–ื™ื”ื•ื™ ื ืชื‘ื™ื + +#### Ping +```bash +ping 192.168.1.100 -c4 +``` +- ื‘ื“ื™ืงืช ืฉื™ืจื•ืชื™ื•ืช +- ื–ื™ื”ื•ื™ latency + +#### Masscan +```bash +masscan 192.168.1.100 -p0-65535 --max-rate 1000 +``` +- ืกืจื™ืงืช ืคื•ืจื˜ื™ื ืžื”ื™ืจื” +- ื ื•ื— ืœืžื˜ืจื•ืช ื’ื“ื•ืœื•ืช + +### Port Scanning + +#### Nmap Full Scan +```bash +nmap -sV -sC -O -p- 192.168.1.100 +``` +- ื–ื™ื”ื•ื™ ืฉื™ืจื•ืชื™ื ื•ื’ืจืกืื•ืช +- ื‘ื“ื™ืงื•ืช ืื‘ื˜ื—ื” ื‘ืกื™ืกื™ื•ืช +- ื–ื™ื”ื•ื™ OS + +### DNS Enumeration + +#### Basic DNS +```bash +dig 192.168.1.100 all +nslookup 192.168.1.100 +whois 192.168.1.100 +``` + +#### Advanced DNS +```bash +dnsenum client.example.com +fierce --domain client.example.com +dnsrecon -d client.example.com +``` +- ื—ื™ืœื•ืฅ ืชืช-ื“ื•ืžื™ื™ื ื™ื +- ื—ืงื™ืจืช DNS ืžืงื™ืคื” + +### Web Enumeration + +#### Dirb +```bash +dirb http://client.example.com +``` +- ื’ื™ืœื•ื™ ื“ื™ืจืงื˜ื•ืจื™ื•ืช +- ืžืฆื™ืืช ืงื‘ืฆื™ื ื—ืฉื•ืคื™ื + +#### Nikto +```bash +nikto -h 192.168.1.100 +``` +- ืกืจื™ืงืช ืื‘ื˜ื—ืช ืืชืจื™ื +- ื–ื™ื”ื•ื™ ืคื’ื™ืขื•ื™ื•ืช ื™ื“ื•ืขื•ืช + +#### Enum4linux +```bash +enum4linux 192.168.1.100 +``` +- ื—ืงื™ืจืช Windows/Samba +- ื—ื™ืœื•ืฅ ืžืฉืชืžืฉื™ื, shares + +## ๐Ÿ” Anonymity Surfing + +ืœื—ื™ืคื•ื™ ื–ื”ื•ืช ื‘ืขืช ืกืจื™ืงื”. + +### ืชืคืจื™ื˜ ืื ื•ื ื™ืžื™ื•ืช + +ื‘ื—ืจ `[a]` ื‘ืชืคืจื™ื˜ ื”ืจืืฉื™: + +``` +[#] ๐Ÿ“œ Anonimity Surfing Menu + +[1] - Anonimity Surfing status +[2] - Anonimity Surfing start +[3] - Anonimity Surfing stop + +[#] ๐Ÿ“œ Network Manager Menu + +[4] - ifconfig -a +[5] - ip a + +[x] - Exit / Quit / Close +``` + +### ืฉื™ืžื•ืฉ + +```bash +[a] โ†’ [2] # Start anonsurf +# ...ื‘ืฆืข ืกืจื™ืงื•ืช... +[a] โ†’ [3] # Stop anonsurf +``` + +## ๐Ÿ“Š ื“ื•ื—ื•ืช + +### ืžื‘ื ื” ื“ื•ื— + +ื›ืœ ื”ื“ื•ื—ื•ืช ื ื•ืฆืจื™ื ื‘ืคื•ืจืžื˜ Markdown: + +```markdown +--- +AnLoMinus Diablo PenTest Report ClientWebsite +#### Date: Mon Oct 28 22:37:00 IST 2025 + +--- + +# ๐Ÿ“œ Menu + +[a] - Anonymity Surfing +[1] - Planning and Scoping +[2] - Reconnaissance & Vulnerability Assessment +[3] - Gaining Access & Maintaining Access +[4] - Covering tracks +[5] - Analysis & Reporting + +--- + +# [1] - Planning and Scoping +### Planning Log 192.168.1.100: + +--- + +# [2] - Reconnaissance & Vulnerability Assessment +### masscan Scan Log 192.168.1.100: +[scan output] + +### nmap Scan Log 192.168.1.100: +[scan output] +``` + +### ืขื™ื‘ื•ื“ ื“ื•ื—ื•ืช + +#### ื”ืžืจื” ืœ-PDF +```bash +# ืขื pandoc +pandoc ClientWebsite-Diablo-Log.md -o ClientWebsite-Report.pdf + +# ืื• GitHub Flavored Markdown +# ื”ืขืœื” ืœ-GitHub ื•ืฆืคื” +``` + +#### ืขื™ื‘ื•ื“ ื ื•ืกืฃ +```bash +# ืฆื™ืจื•ืฃ ื“ื•ื—ื•ืช +cat *-Diablo-Log.md > Combined-Report.md + +# ื—ื™ืคื•ืฉ ืžื™ื“ืข ืจื’ื™ืฉ +grep -i "password\|secret\|key" *-Diablo-Log.md +``` + +## ๐Ÿ’ก ื˜ื™ืคื™ื ืžืชืงื“ืžื™ื + +### ืขื‘ื•ื“ื” ืขื ืžื˜ืจื•ืช ืžืจื•ื‘ื•ืช + +```bash +# ืชื™ืงื™ื™ื” ื™ื™ืขื•ื“ื™ืช ืœื›ืœ ืคืจื•ื™ืงื˜ +mkdir -p ~/pentest-reports +cd ~/pentest-reports + +# ื”ืคืขืœ Diablo +./Diablo +# [p] โ†’ define project โ†’ perform scans +``` + +### ืื•ื˜ื•ืžืฆื™ื” ื—ืœืงื™ืช + +```bash +#!/bin/bash +# quick-scan.sh + +echo "Target IP?" +read TARGET + +# Edit Diablo script temporarily +# Or use expect for automation +``` + +### ืื™ื ื˜ื’ืจืฆื™ื” ืขื ื›ืœื™ื ืื—ืจื™ื + +#### Burp Suite +```bash +# Export targets from Diablo report +grep -E "^http://\|^https://" ClientWebsite-Diablo-Log.md > targets.txt + +# Import to Burp +``` + +#### Metasploit +```bash +# Find vulnerabilities +grep -i "vulnerability\|CVE" ClientWebsite-Diablo-Log.md +``` + +### ืกืงืจื™ืคื˜ื™ื ืžื•ืชืืžื™ื + +#### ืกืจื™ืงื” ืงืœื” +```bash +# light-scan.sh +echo "Target?" +read TARGET +echo "Running light scan on $TARGET..." +nmap -sV -p 80,443,22,21 $TARGET +dig $TARGET all +``` + +#### ืกืจื™ืงื” ืขืžื•ืงื” +```bash +# deep-scan.sh +# ื”ืคืขืœ ืืช ื›ืœ ื”ื‘ื“ื™ืงื•ืช ื‘-Diablo +# ืชื”ืœื™ืš ืืจื•ืš ืื‘ืœ ืžืงื™ืฃ +``` + +## โš ๏ธ ืžื•ืžืœืฅ ืœื–ื›ื•ืจ + +### ืœืคื ื™ ืกืจื™ืงื” +- โœ… ืงื‘ืœ ื”ืจืฉืื” ืžืคื•ืจืฉืช +- โœ… ื•ื“ื ืฉื”ืžื˜ืจื” ืฉื™ื™ื›ืช ืœืš/ืœืงื•ื— +- โœ… ื”ื’ื“ืจ ืฉืขื•ื ื™ timeout +- โœ… ื‘ื“ื•ืง ืชืฆื•ืจืช Firewall + +### ื‘ืžื”ืœืš ืกืจื™ืงื” +- โฑ๏ธ ืชื™ื–ืžื ื ื›ื•ืŸ - ื—ืœืง ืžื”ืกืจื™ืงื•ืช ืืจื•ื›ื•ืช +- ๐Ÿ“Š ืฉืžื•ืจ ืคืœื˜ ื‘ื™ื ื™ื™ื +- โš ๏ธ ื”ื™ื–ื”ืจ ืžืฉื™ืžื•ืฉ ื‘ืžืฉืื‘ื™ื + +### ืื—ืจื™ ืกืจื™ืงื” +- ๐Ÿ“ ืกืงื•ืจ ืืช ื”ื“ื•ื— +- ๐Ÿ”’ ื”ื—ืกืจ ืžื™ื“ืข ืจื’ื™ืฉ +- ๐Ÿ“ค ืฉืชืฃ ืจืง ืขื ืžื™ ืฉืฆืจื™ืš +- ๐Ÿ—‘๏ธ ื”ืกืจ ื“ื•ื—ื•ืช ื™ืฉื ื™ื + +## ๐Ÿ†˜ ืคืชืจื•ืŸ ื‘ืขื™ื•ืช + +### ืกืจื™ืงื•ืช ืœื ืคื•ืขืœื•ืช +```bash +# ื‘ื“ื•ืง ื›ืœื™ื ืžื•ืชืงื ื™ื +which nmap dig masscan + +# ื‘ื“ื•ืง ื”ืจืฉืื•ืช +sudo nmap -sV target + +# ื‘ื“ื•ืง ืจืฉืช +ping target +``` + +### ื“ื•ื— ื’ื“ื•ืœ ืžื“ื™ +```bash +# ืกืจื™ืงื•ืช ื‘ืกื™ืกื™ื•ืช ื‘ืœื‘ื“ +# ืกื ืŸ output +nmap target 2>&1 | grep -v "Nmap scan report" +``` + +### ืขื“ื›ื•ืŸ ื›ืœื™ื +```bash +# Kali Linux +sudo apt update && sudo apt upgrade -y + +# macOS +brew update && brew upgrade +``` + +## ๐Ÿ“š ืžืฉืื‘ื™ื ื ื•ืกืคื™ื + +- [Getting Started](./GETTING_STARTED.md) +- [Architecture](./ARCHITECTURE.md) +- [FAQ](./FAQ.md) +- [Best Practices](./BEST_PRACTICES.md) + +--- + +**ืฉื™ืžื•ืฉ ื‘ืื—ืจื™ื•ืช ื•ืขืฉื™ื™ื” ืงื•ื“ืฉืช** ๐Ÿ” +