https://github.com/soccer-project-dep/vulnman-domain-discovery
The vulnman-domain-discovery project is a tool used to discover a list of target domains, which are then scanned by vulnerability scanners.
https://github.com/soccer-project-dep/vulnman-domain-discovery
bbot inventory-management vulnerability-management
Last synced: 3 months ago
JSON representation
The vulnman-domain-discovery project is a tool used to discover a list of target domains, which are then scanned by vulnerability scanners.
- Host: GitHub
- URL: https://github.com/soccer-project-dep/vulnman-domain-discovery
- Owner: SOCCER-Project-DEP
- License: other
- Created: 2025-02-11T15:05:40.000Z (4 months ago)
- Default Branch: main
- Last Pushed: 2025-02-20T17:54:12.000Z (3 months ago)
- Last Synced: 2025-02-20T18:36:49.909Z (3 months ago)
- Topics: bbot, inventory-management, vulnerability-management
- Language: Python
- Homepage:
- Size: 53.7 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Vulnerability Management Domain Discovery
The vulnman-domain-discovery project is a tool used to discover a list of target domains, which are then scanned by vulnerability scanners.
Domains are collected from various sources; currently supported sources are [BBOT](https://github.com/blacklanternsecurity/bbot) and Lubos (CSIRT-MU internal scanner built atop of Masscan). The domains are then saved to a database. Other tools may then use the database as a source of their scans.
Domain Discovery (DD2) supports the blacklisting of domains; these are defined in the `blacklist.txt` file.
This repository contains only BBOT runner.
## Setup (Ansible)
See [SOCCER-Project-DEP/vulnman-ansible](https://github.com/SOCCER-Project-DEP/vulnman-ansible) for Ansible that deploys this tool alongside [vulnman-nuclei-orchestrator](https://github.com/SOCCER-Project-DEP/vulnman-nuclei-orchestrator).
## Setup (standalone)
```bash
# install dependencies
poetry install
# fill in PostgreSQL connection string
cp .env.example .env
```
## Usage
```bash
poetry run python src/main.py --help
# Or docker
docker run -it vulnman/domain-discovery poetry run python src/main.py --help
```
## Testing
1. Install the dependencies with poetry, also sqlite3 is required.
1. Fill in the `.env` file.
1. Run the tests.
```bash
poetry run pytest
```
## Debbuging && FAQ
1. `Exception: Environment variable DB_CONN_STR is not set` - This error is thrown when the `DB_CONN_STR` environment variable is not set. This variable should contain the connection string to the database. Supply the PostgreSQL connection string in the `.env` file.
2. BBOT directly integrates with nuclei; what is the benefit of this tool? This solution is more flexible, and we are not locked in with just nuclei.
## Additional information
- This repository is being developed as a part of the [SOCCER](https://soccer.agh.edu.pl/en/) project.
- Developed by the cybersecurity team of [Masaryk University](https://www.muni.cz/en).
- This project is a "mirror" of the original repository hosted on university Gitlab. New features and fixes here are being added upon new releases of the original repository.
## Help
Are you missing something? Do you have any suggestions or problems? Please create an issue.
Or ask us at `[email protected]`; we are happy to help you, answer your questions, or discuss your ideas.