rpriven
93ed13d6ee
- nak.cheat: fiatjaf's Nostr army knife (placeholder keys + relay picker) - opsec.cheat: 'inspect secrets without exposing them' section - Stage 20 previously-untracked cheats (gpg, tor, veracrypt, email-privacy, etc.) - .gitleaksignore: allowlist the canonical jwt.io example token (verified false positive) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
67 lines
2.2 KiB
Text
67 lines
2.2 KiB
Text
% vulnerability-scanning, pentesting
|
|
|
|
# Nessus scan via CLI
|
|
/opt/nessus/bin/nessuscli scan <target>
|
|
$ target: echo -e "192.168.1.0/24\n10.0.0.1\ntarget.com"
|
|
|
|
# Nessus scan list
|
|
/opt/nessus/bin/nessuscli scan --list
|
|
|
|
# Nexpose scan via CLI
|
|
/opt/rapid7/nexpose/nsc/nsc.sh -s <site_id> -t <target>
|
|
$ site_id: echo -e "1\n2\n3"
|
|
$ target: echo -e "192.168.1.0/24\n10.0.0.1"
|
|
|
|
# Nuclei vulnerability scan
|
|
nuclei -u <url> -t <template_path>
|
|
$ url: echo -e "https://target.com\nhttp://192.168.1.1"
|
|
$ template_path: echo -e "~/nuclei-templates/cves/\n~/nuclei-templates/exposures/"
|
|
|
|
# Nuclei scan with all templates
|
|
nuclei -u <url> -t ~/nuclei-templates/ -severity critical,high,medium
|
|
|
|
# Nuclei scan targets from file
|
|
nuclei -l <targets_file> -t ~/nuclei-templates/cves/
|
|
$ targets_file: echo -e "targets.txt\nurls.txt\ndomains.txt"
|
|
|
|
# Update Nuclei templates
|
|
nuclei -update-templates
|
|
|
|
# OpenVAS scan via CLI (requires setup)
|
|
gvm-cli --gmp-username <username> --gmp-password <password> socket --xml "<create_task><name>scan</name><target><hosts><host><name><target></name></host></hosts></target></create_task>"
|
|
$ username: echo "admin"
|
|
$ password: echo "password"
|
|
$ target: echo -e "192.168.1.0/24\n10.0.0.1"
|
|
|
|
# Scan with Nessus policy
|
|
/opt/nessus/bin/nessuscli scan --policy <policy_name> <target>
|
|
$ policy_name: echo -e "Basic Network Scan\nWeb Application Tests"
|
|
$ target: echo -e "192.168.1.0/24\ntarget.com"
|
|
|
|
% metasploit, exploitation
|
|
|
|
# Start Metasploit console
|
|
msfconsole
|
|
|
|
# Search exploits in Metasploit
|
|
msfconsole -q -x "search <keyword>; exit"
|
|
$ keyword: echo -e "apache\nmicrosoft\nlog4j\nproxyshell"
|
|
|
|
# Use specific exploit module
|
|
msfconsole -q -x "use <exploit_path>; show options; exit"
|
|
$ exploit_path: echo -e "exploit/windows/smb/ms17_010_eternalblue\nexploit/multi/http/log4shell"
|
|
|
|
# Search Exploit-DB
|
|
searchsploit <keyword>
|
|
$ keyword: echo -e "apache 2.4\nwindows 10\njoomla 3.9"
|
|
|
|
# Download exploit from Exploit-DB
|
|
searchsploit -m <exploit_id>
|
|
$ exploit_id: echo -e "50383\n49821\n48506"
|
|
|
|
# Search GitHub for exploits
|
|
gh search repos <keyword> --topic exploit
|
|
$ keyword: echo -e "cve-2021-44228\nproxyshell\nlog4j"
|
|
|
|
# MetasploitAI (AI-assisted exploitation)
|
|
# Visit: https://metasploitai.com
|