Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/k1m0ch1/axolotl
toolings for pentester to makes their life easier
https://github.com/k1m0ch1/axolotl
Last synced: about 2 months ago
JSON representation
toolings for pentester to makes their life easier
- Host: GitHub
- URL: https://github.com/k1m0ch1/axolotl
- Owner: k1m0ch1
- License: mit
- Created: 2022-03-09T15:08:15.000Z (over 2 years ago)
- Default Branch: master
- Last Pushed: 2023-02-25T11:39:32.000Z (over 1 year ago)
- Last Synced: 2024-06-19T10:05:35.966Z (3 months ago)
- Language: Go
- Size: 3.33 MB
- Stars: 9
- Watchers: 2
- Forks: 2
- Open Issues: 5
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
Awesome Lists containing this project
- awesome-made-by-indonesian - axolotl - `toolings for pentester to makes their life easier` *by [Yahya Fadhlulloh Al-Fatih](https://github.com/k1m0ch1)* (A)
- made-in-indonesia - axolotl - `toolings for pentester to makes their life easier` *by [Yahya Fadhlulloh Al-Fatih](https://github.com/k1m0ch1)* (A)
README
```
___ ___ ___ ______ __ ______ .___________. __
/ \ \ \ / / / __ \ | | / __ \ | || |
/ ^ \ \ V / | | | | | | | | | | `---| |----`| |
/ /_\ \ > < | | | | | | | | | | | | | |
/ _____ \ / . \ | `--' | | `----.| `--' | | | | `----.
/__/ \__\ /__/ \__\ \______/ |_______| \______/ |__| |_______|
```
# Axolotl - ez vuln record
axolotl is a pentest collaboration tools, comes with a simple feature, and it want to keep it simple, you only need to install axolotl and git on your machine. It has a main purpose to store and collaborate all finding with your team or yourself, and axolotl process the data to simplify lookup data, make a simple statistic and generate a simple report.
When it comes with pentestration collaboration tools, It becomes hard when you manage the document based, sometime rely on file you store on harddrive or cloud storage is hard to manage, and you need times to makes a report or statistic.
Another option, you can manage every finding with "any" pentest documentation tools, sometime with great feature generate documentation and statistic, but it comes with problem you need to pay, sometime you need to install on your server/local and have many requirement to install.
axolotl comes with a simple feature, and it want to keep it simple, you only need to install axolotl and git on your machine. It has a main purpose to store and collaborate all finding with your team or yourself, and axolotl process the data to simplify lookup data, make a simple statistic and generate a simple report.
Axolotl inspired from [nuclei](https://github.com/projectdiscovery/nuclei) project, where I'm using nuclei as the collaboration tools for poc.
# tl;dr axolotl
```
!!Attention!! All data at the screenshot is all dummy, not real data
```
1. Download the binary from [Release](https://github.com/k1m0ch1/axolotl/releases)
2. Install on your machine
3. Run `axolotl init` to create new directory structure
4. Generate host identity and input as you needs (if you didn't need the key, just delete the key)
```
axolotl add -d domain.com
```
5. Generate Vulnerability Finding and input as you needs (if you didn't need the key, just delete the key)
```
axolotl add -d domain.com -v vuln-name-without-space
```
6. List all current Host
```
axolotl lookup host
```
7. List all current Vuln
```
axolotl lookup vuln
```
8. Information Host with Vuln
```
axolotl info -d domain.com
```
9. simple statistic about your finding
```
axolotl stat
```
10. repeat from `4` to add more host and vuln finding
Check [How to use](https://axolotl.readthedocs.io/en/latest/) page for detail how to use
## Docker Usage
Building
```
docker build . -t axolotl
```
Run it with volume
```
docker run -v ./testworkdir:/workdir -it axolotl --help
```
## Operation in docker
Here is sample commands with docker
```
PS C:\> docker run -v ./testworkdir:/workdir -it axolotl add -d example.com
──────────────────────────────────────
Axolotl v0.2.0-alpha - Ez Vuln Record
https://github.com/k1m0ch1/axolotl
──────────────────────────────────────
[+] Host example.com is Created at ./hosts
PS C:\> docker run -v ./testworkdir:/workdir -it axolotl add -d example.com -p 443 -v IDOR
──────────────────────────────────────
Axolotl v0.2.0-alpha - Ez Vuln Record
https://github.com/k1m0ch1/axolotl
──────────────────────────────────────
[+] File IDOR.yml is generated at ./vulns, Happy Hacking!
PS C:\> docker run -v ./testworkdir:/workdir -it axolotl info -d example.com
──────────────────────────────────────
Axolotl v0.2.0-alpha - Ez Vuln Record
https://github.com/k1m0ch1/axolotl
──────────────────────────────────────
Info Result of the Domain `example.com`
Domain `example.com` ()
Technology :
Current Vulnerability :
1. IDOR
()
```
## Release and Contributing
We appreciate all contributions. If you are planning to contribute any bug-fixes, please do so without further discussions.
If you plan to contribute new features, new tuners, new training services, etc. please first open an issue or reuse an exisiting issue, and discuss the feature with us. We will discuss with you on the issue timely or set up conference calls if needed.
To learn more about making a contribution to axolotl, please refer to our How-to contribution page.
Please let us know if you encounter a bug by filling an issue.
We appreciate all contributions and thank all the contributors!
