.______ .______ .______ ._______ ._______ ._______ _____._
:_ _ : __ : __ : .___ : __ / : .___ __ _:|
| | || ____|| ____|| : | || |> | : | | | :|
| . | || : | : | : || |> | : | | |
|. ____/ | |___| |___ _. ___/ |_______/ _. ___/ | |
:/ |___| |___| :/ :/ |___|
: : :
版权所有 2019 National Technology & Engineering Solutions of Sandia, LLC (NTESS)。根据与 NTESS 签订的合同 DE-NA0003525 的条款,美国政府保留对此软件的某些权利。
Dr.ROBOT 是一个领域侦察和枚举工具。通过利用容器来减少处理依赖关系、跨操作系统和不同语言的不一致的开销,Dr.ROBOT 具有高度可移植性和可配置性。
用例:收集组织拥有的尽可能多的面向公众的服务器。查询 DNS 资源使我们能够快速开发大量可能的目标列表,您可以对其进行进一步分析。
注意:ROBOT 博士不仅仅是一匹只会耍花招的小马。您可以轻松自定义用于收集信息的工具,以便您可以享受使用最新、最好的工具以及您最喜欢的工具的好处。
Dr.ROBOT 将配置文件、模板、日志、输出文件和数据库文件添加到.drrobot
下的$HOME
目录中
目录结构将如下所示:
-rw-r--r-- 1 0 Sep 16 12:15 ansible_inventory
drwxr-xr-x 5 160 Sep 16 12:18 ansible_plays
-rw-r--r-- 1 13576 Sep 16 12:41 config.json
drwxr-xr-x 4 128 Sep 17 10:48 dbs
drwxr-xr-x 21 672 Sep 16 13:51 docker_buildfiles
drwxr-xr-x 4 128 Sep 16 15:38 logs
drwxr-xr-x 3 96 Sep 16 12:46 output
如果您在保存时破坏了配置,您可以删除$HOME
目录中的 config.json 文件并重新运行 Dr.ROBOT,这将为您生成一个新的配置文件。
git clone
cd gitrepo
pip install -r requirements.txt
pip install -e .
drrobot --help
usage: drrobot [-h] [--proxy PROXY] [--dns DNS] [--verbose] [--dbfile DBFILE]
{gather,inspect,upload,rebuild,dumpdb,output,serve} ...
Docker DNS recon tool
positional arguments:
{gather,inspect,upload,rebuild,dumpdb,output,serve}
gather Runs initial scanning phase where tools under the
webtools/scannerscategory will run and gather
information used in the following phases
inspect Run further tools against domain information gathered
from previous step.Note: you must either supply a file
which contains a list of IP/Hostnames orThe targeted
domain must have a db under the dbs folder
upload Upload recon data to Mattermost/Slack
rebuild Rebuild the database with additional files/all files
from previous runtime
dumpdb Dump contents of database (ip,hostname,banners) to a
text file with hostname for filename
output Generate output in specified format. Contains all
information from scans (images, headers, hostnames,
ips)
serve Serve database file in docker container using django
optional arguments:
-h, --help show this help message and exit
--proxy PROXY Proxy server URL to set DOCKER http_proxy too
--dns DNS DNS server to add to resolv.conf of DOCKER containers
--verbose Display verbose statements
--dbfile DBFILE Specify what db file to use for saving data too
git clone
cd gitrepo
pipenv sync
pipenv shell
drrobot --help
usage: drrobot [-h] [--proxy PROXY] [--dns DNS] [--verbose] [--dbfile DBFILE]
{gather,inspect,upload,rebuild,dumpdb,output,serve} ...
Docker DNS recon tool
positional arguments:
{gather,inspect,upload,rebuild,dumpdb,output,serve}
gather Runs initial scanning phase where tools under the
webtools/scannerscategory will run and gather
information used in the following phases
inspect Run further tools against domain information gathered
from previous step.Note: you must either supply a file
which contains a list of IP/Hostnames orThe targeted
domain must have a db under the dbs folder
upload Upload recon data to Mattermost/Slack
rebuild Rebuild the database with additional files/all files
from previous runtime
dumpdb Dump contents of database (ip,hostname,banners) to a
text file with hostname for filename
output Generate output in specified format. Contains all
information from scans (images, headers, hostnames,
ips)
serve Serve database file in docker container using django
optional arguments:
-h, --help show this help message and exit
--proxy PROXY Proxy server URL to set DOCKER http_proxy too
--dns DNS DNS server to add to resolv.conf of DOCKER containers
--verbose Display verbose statements
--dbfile DBFILE Specify what db file to use for saving data too
在代理后面运行它是很痛苦的。为了减轻这种痛苦,我们在$HOME/.drrobot/*
下创建一个 certs 目录,您可以在其中添加 crt 文件。作为 dockerfile 构建过程的一部分,我们现在生成带有证书的 tarfile,以便 Amass 等应用程序可以运行。
Dr.ROBOT 中包含一个 docker-compose.yml 文件。该文件包含一个简单的撰写文件,用于提供 Minio 以及运行时收集的文件。
使用方法:
cd /path/to/drrobot/
docker-compose up
该工具严重依赖 Docker。
请参阅此处的安装说明:
您可以使任何模块支持 Ansible。
有关说明,请参阅安装指南。
brew install gnu-tar
eval $(ssh-agent)
ssh-add /path/to/keyfile
要添加您自己的工具,请参阅配置以开始使用。
有关用法,请参阅用法以开始使用。