mirror of
https://github.com/Ekultek/Zeus-Scanner.git
synced 2026-03-11 08:55:51 +00:00
131 lines
No EOL
9 KiB
Markdown
131 lines
No EOL
9 KiB
Markdown
[](https://github.com/ekultek/zeus-scanner/stargazers)
|
|
[](https://github.com/ekultek/zeus-scanner/network)
|
|
[](https://github.com/ekultek/zeus-scanner/issues)
|
|
[](https://raw.githubusercontent.com/Ekultek/Zeus-Scanner/master/.github/LICENSE.md)
|
|
[](https://twitter.com/Zeus_Scanner)
|
|
[](https://github.com/Ekultek/Zeus-Scanner#donations)
|
|
|
|
# Helpful links directory
|
|
|
|
- [What is Zeus](https://github.com/Ekultek/Zeus-Scanner#zeus-scanner)
|
|
- [Zeus's features](https://github.com/Ekultek/Zeus-Scanner#features)
|
|
- [Requirements and installation](https://github.com/Ekultek/Zeus-Scanner#requirements)
|
|
- [Ubuntu/Debian](https://github.com/Ekultek/Zeus-Scanner#ubuntudebian)
|
|
- [centOS](https://github.com/Ekultek/Zeus-Scanner#centos)
|
|
- [other](https://github.com/Ekultek/Zeus-Scanner#others)
|
|
- [Screenshots](https://github.com/Ekultek/Zeus-Scanner#screenshots)
|
|
- [Demo video](https://vimeo.com/239885768)
|
|
- [User manual](https://github.com/Ekultek/Zeus-Scanner/wiki)
|
|
- [How Zeus works](https://github.com/Ekultek/Zeus-Scanner/wiki/How-Zeus-works)
|
|
- [Functionality](https://github.com/Ekultek/Zeus-Scanner/wiki/Functionality)
|
|
- [Passing sqlmap flags with Zeus](https://github.com/Ekultek/Zeus-Scanner/wiki/Passing-flags-to-sqlmap)
|
|
- [Legal information](https://github.com/Ekultek/Zeus-Scanner/tree/master/.github)
|
|
- [License (GPL)](https://github.com/Ekultek/Zeus-Scanner/blob/master/.github/LICENSE.md)
|
|
- [Code of conduct](https://github.com/Ekultek/Zeus-Scanner/blob/master/.github/CODE_OF_CONDUCT.md)
|
|
- [Report a bug](https://github.com/Ekultek/Zeus-Scanner/issues/new)
|
|
- [Open a pull request](https://github.com/Ekultek/Zeus-Scanner/compare)
|
|
- [Contribution guidelines](https://github.com/Ekultek/Zeus-Scanner/blob/master/.github/CONTRIBUTING.md)
|
|
- [Donations to Zeus](https://github.com/Ekultek/Zeus-Scanner#donations)
|
|
|
|
# Zeus-Scanner
|
|
|
|
### What is Zeus?
|
|
|
|
Zeus is a advanced dork searching utility that is capable of bypassing search engine API calls, search engine captchas, and extracting the URL from Google's ban URL, thus bypassing IP bans. Zeus can use four different search engines (`DuckDuckGo`, `AOL`, `Bing`, and `Google`) to do the dork searching (_default is `Google`_). Zeus has a powerful built in URL parsing engine, automates a hidden web browser to pull the search URL before parsing, and can run multiple vulnerability assessments on the found URLs. Zeus comes complete with automatic issue creation, self correcting scripts, and a simple usage
|
|
|
|
### Features
|
|
|
|
- Multiple search engine compatibility (`DuckDuckGo`, `AOL`, `Bing`, `Google`)
|
|
- Ban URL extraction (pull the true URL from the ban URL)
|
|
- Google webcache URL extraction (extract the true URL from a webcache URL)
|
|
- Proxy compatibility (`http`, `https`, `socks4`, `socks5`)
|
|
- Tor proxy compatibility and Tor browser emulation
|
|
- Parse `robots.txt`/`sitemap.xml` and save them to a file
|
|
- Multiple vulnerability assessments (XSS, SQLi, clickjacking, port scanning, admin panel finding, whois lookups, and more)
|
|
- Tamper scripts to obfuscate XSS tests
|
|
- Ability to search multiple pages of Google, and use Google's API
|
|
- Can run with a custom default user-agent, one of over 4000 random user-agents, or a personal user-agent
|
|
- Automatic issue creation
|
|
- Ability to crawl a webpage and pull all the links
|
|
- Can run a singular dork, multiple dorks in a given file, or a random dork from a list of over 5000 carefully researched dorks
|
|
- and much more...
|
|
|
|
### Screenshots
|
|
|
|
Running without a mandatory options, or running the `--help` flag will output Zeus's help menu:
|
|
|
|
A basic dork scan with the `-d` flag, from the given dork will launch an automated browser and pull the Google page results:
|
|
|
|
Calling the `-s` flag will prompt for you to start the sqlmap API server `python sqlmapapi.py -s` from sqlmap, it will then connect to the API and perform a sqlmap scan on the found URL's.
|
|
|
|
|
|
You can see more screenshots [here](https://github.com/Ekultek/Zeus-Scanner/wiki/Screenshots)
|
|
|
|
### Demo
|
|
|
|
[
|
|
](https://vimeo.com/239885768)
|
|
|
|
### Requirements
|
|
|
|
There are some requirements for this to be run successfully.
|
|
|
|
##### Basic requirements
|
|
|
|
- `libxml2-dev`, `libxslt1-dev`, `python-dev` are required for the installation process
|
|
- Firefox web browser is required as of now, I will be adding the functionality of most web browsers.
|
|
- If you want to run sqlmap through the URL's you will need sqlmap somewhere on your system.
|
|
- If you want to run a port scan using nmap on the URL's IP addresses. You will need nmap on your system.
|
|
- [Geckodriver](https://github.com/mozilla/geckodriver) is required to run the firefox web browser and will be installed the first time you run. It will be added to your `/usr/bin` so that it can be run in your ENV PATH.
|
|
- You must be `sudo` for the first time running this so that you can add the driver to your PATH, you also may need to run as `sudo` depending on your permissions.
|
|
- `xvfb` is required by pyvirtualdisplay, it will be installed if not installed on your first run
|
|
|
|
##### Python package requirements
|
|
|
|
- [selenium-webdriver](http://www.seleniumhq.org/projects/webdriver/) package is required to automate the web browser and bypass API calls.
|
|
- [requests](http://docs.python-requests.org/en/master/) package is required to connect to the URL, and the sqlmap API
|
|
- [python-nmap](http://xael.org/pages/python-nmap-en.html) package is required to run nmap on the URL's IP addresses
|
|
- [whichcraft](https://github.com/spookyowl/witchcraft) package is required to check if nmap and sqlmap are on your system if you want to use them
|
|
- [pyvirtualdisplay](https://pyvirtualdisplay.readthedocs.io/en/latest/) package is required to hide the browser display while finding the search URL
|
|
- [lxml](https://lxml.readthedocs.io/en/latest/) is required to parse XML data for the sitemap and save it as such
|
|
- [google-api-python-client](https://github.com/google/google-api-python-client) is required to search via Google's API client
|
|
- [psutil](https://github.com/giampaolo/psutil) is required to search for running sqlmap API sessions
|
|
- [httplib2](https://github.com/httplib2/httplib2) is required to allow user-agent changes during Google's API client searches
|
|
- [beautifulsoup](https://www.crummy.com/software/BeautifulSoup/bs4/doc/) is required to pull all the HREF descriptor tags while using the blackwidow crawler
|
|
|
|
### Installation
|
|
|
|
You can download the latest [tar.gz](https://github.com/ekultek/zeus-scanner/tarball/master), the latest [zip](https://github.com/ekultek/zeus-scanner/zipball/master), or you can find the current stable release [here](https://github.com/Ekultek/Zeus-Scanner/releases/tag/v1.2). Alternatively you can install the latest development version by following the instructions that best match your operating system:
|
|
|
|
**_NOTE: (optional but highly advised)_** add sqlmap and nmap to your environment PATH by moving them to `/usr/bin` or by adding them to the PATH via terminal
|
|
|
|
##### Ubuntu/Debian
|
|
|
|
```
|
|
sudo apt-get install libxml2-dev libxslt1-dev python-dev && git clone https://github.com/ekultek/zeus-scanner.git && cd zeus-scanner && sudo pip install -r requirements.txt && sudo python zeus.py
|
|
```
|
|
|
|
##### centOS
|
|
|
|
```
|
|
sudo apt-get install gcc python-devel libxml2-dev libxslt1-dev python-dev && git clone https://github.com/ekultek/zeus-scanner && cd zeus-scanner && sudo pip install -r requirements.txt && sudo python zeus.py
|
|
```
|
|
|
|
##### Others
|
|
|
|
```
|
|
sudo apt-get install libxml2-dev libxslt1-dev python-dev && git clone https://github.com/ekultek/zeus-scanner.git && cd zeus-scanner && sudo pip install -r requirements.txt && sudo python zeus.py
|
|
```
|
|
|
|
This will install all the package requirements along with the geckodriver
|
|
|
|
|
|
### Donations
|
|
|
|
Zeus is created by a small team of developers that have an aspiration for information security and a strive to succeed. If you like Zeus and want to donate to our funding, we gladly and appreciatively accept donations via:
|
|
|
|
- Bitcoin(BTC) via: `3DAQGcAQ194NGVs16Mmv75ip45CVuE8cZy`
|
|
- [PayPal](https://www.paypal.me/ZeusScanner)
|
|
- Or you can [Buy me a coffee](https://ko-fi.com/A28355P5)
|
|
|
|
You can be assured that all donations will go towards Zeus funding to make it more reliable and even better, thank you from the Zeus development team |