Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/davidalami/VulnMapAI
VulnMapAI combines the power of nmap’s detailed network scanning and the advanced natural language processing capabilities of GPT-4 to generate comprehensive and intelligible vulnerability reports. It aims to facilitate the identification and understanding of security vulnerabilities.
https://github.com/davidalami/VulnMapAI
hacking hackthebox hacktoberfest machine-learning penetration-testing port-scanning security tryhackme vulnerability-scanners
Last synced: 13 days ago
JSON representation
VulnMapAI combines the power of nmap’s detailed network scanning and the advanced natural language processing capabilities of GPT-4 to generate comprehensive and intelligible vulnerability reports. It aims to facilitate the identification and understanding of security vulnerabilities.
- Host: GitHub
- URL: https://github.com/davidalami/VulnMapAI
- Owner: davidalami
- License: mit
- Created: 2023-09-21T18:14:52.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2023-10-18T14:09:25.000Z (about 1 year ago)
- Last Synced: 2024-09-11T03:44:30.059Z (4 months ago)
- Topics: hacking, hackthebox, hacktoberfest, machine-learning, penetration-testing, port-scanning, security, tryhackme, vulnerability-scanners
- Language: Python
- Homepage:
- Size: 396 KB
- Stars: 24
- Watchers: 1
- Forks: 8
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
Awesome Lists containing this project
- awesome-hacking-lists - davidalami/VulnMapAI - VulnMapAI combines the power of nmap’s detailed network scanning and the advanced natural language processing capabilities of GPT-4 to generate comprehensive and intelligible vulnerability reports. It (Python)
README
# VulnMapAI
VulnMapAI combines the power of nmap’s detailed network scanning and the advanced natural language processing capabilities of GPT-4 to generate comprehensive and intelligible vulnerability reports. It aims to facilitate the identification and understanding of security vulnerabilities.
## Features
- **Automated Network Scanning:** Uses Nmap for automated discovery and scanning of systems.
- **Exploit Suggestions:** Offers suggestions for potential exploits based on discovered services and versions.
- **Report Generation:** Creates comprehensive reports based on discovery and suggested exploits.
- **Metasploit Integration:** Integrates with Metasploit for searching and verifying exploits.
- **Multi-Process Scanning:** Leverages multi-process capabilities for efficient network scanning.
## Getting Started
### Prerequisites
- Python 3.x
- Metasploit Framework
- Nmap
- Required Python libraries: `httpx`, `pymetasploit3`
OR
- Docker
### Usage
#### For hackers:
- Run the image (command crafted to use against HackTheBox/TryHackMe machines)
```
docker run -it \
-e OPENAI_API_KEY="sk-.." \
-v $(pwd):/app \
--sysctl net.ipv6.conf.all.disable_ipv6=0 \
--cap-add NET_ADMIN \
--cap-add SYS_MODULE \
--device /dev/net/tun:/dev/net/tun \
--entrypoint=/bin/bash -p 1337:1337 quantumcrack/vulnmapai-final:latest
```
- Run `tmux`, then `openvpn lab_your_username.ovpn`, then `Ctrl+b` and `d`, you should be back to the main terminal
- Run ```python main.py TRYHACKME_MACHINE_IP --top_ports 500```. Happy hacking!
#### For developers:
- Clone the project and change directory ```git clone https://github.com/davidalami/VulnMapAI.git && cd ./VulnMapAI```
- Build the image ```DOCKER_BUILDKIT=1 docker build -f build/final_image/Dockerfile -t quantumcrack/vulnmapai-final:latest .```
- Run the image in interactive mode, pass a valid openai API key as an environment variable
```docker run -it --entrypoint=/bin/bash -e "OPENAI_API_KEY=sk-.." -v $(pwd):/app -p 1337:1337 quantumcrack/vulnmapai-final:latest ```
- Pass target IP addresses to the python script, like ```python main.py 127.0.0.1 --top_ports 500``` and make yourself a coffee!
#### Accessing the report
Once the scanning process completes, the web application powered by Flask becomes accessible.
You can view the generated report by opening your web browser and navigating to http://localhost:1337/.
## Support
If you find any bugs or have feature requests, please open an issue detailing the bug or feature.
## Disclaimer
This application is intended for educational and lawful activities only. Users are responsible for ensuring all activities conform to applicable local, state, and federal laws and regulations. We assume no responsibility for any misuse or damage caused by this program.
## Acknowledgements
We would like to acknowledge the developers of the utilized libraries and tools, such as Metasploit and Nmap, for their significant contributions to the cybersecurity community.