Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/Cyberlands-io/epiphany

A pre-DDoS security assessment tool
https://github.com/Cyberlands-io/epiphany

ddos ddos-mitigation ddos-protection ddos-tool

Last synced: 22 days ago
JSON representation

A pre-DDoS security assessment tool

Awesome Lists containing this project

README

        

# Epiphany
## Description
Epiphany - is a pre-engagement \ self-assessment tool to identify weak spots of a web property from a DDoS attacker perspective.
- In the first stage, the tool crawls pages, enumerates POST and GET requests.
- On the second stage: Epiphany records response time for each page and detect ones that are most vulnerable for potential DDoS attack.
- Also, Epiphany performs heuristic discovery whether pages are cached or not.

Epiphany allow a clear understanding of a DDoS attack surface to build high-quality test cases for the DDoS assessment and recommendations for remediation and control improvements.

## Disclamer
> Epiphany should be used for authorized DDoS security assessment and/or nonprofit educational purposes only. Any misuse of this software will not be the responsibility of the author or of any other collaborator. Use it at your own networks and/or with the network owner's permission.

## Installation
```
git clone https://github.com/Cyberlands-io/epiphany.git
cd epiphany
pip3 install -r requirements.txt
```

## Usage
```python3 epiphany.py ```

**File parameters:**
* positional arguments:
* ```host``` - Target Hosts
* ```payload``` - Path to payload file for POST requests. Each line contains payload for the next parameter.

* optional arguments:
* ```-h, --help``` - show this help message and exit
* ```-oC``` - Output result to console
## Docker usage
```
docker build -t epiphany .
docker run -v /tmp/:/app/reports/ epiphany google.com payloads
```
## To do
- [x] Analysis of POST and GET requests **For now it's works as default option**
- [x] Adding output to XML **For now it's only one available output to file**
- [ ] Adding option to perform apart GET and POST analysis
- [ ] Adding optional output to JSON

## Authors
- [Cyberlands.io](https://www.cyberlands.io)
- [@excellencenatural](https://github.com/excellencenatural)

## License
Please follow the [LICENSE](LICENSE)