Package: sarenka
â™Ą Free Software, requires only free accounts to third part services â™ĄLack of knowledge ... that is the problem.William Edwards DemingSARENKAis Open Source Intelligence (OSINT) tool which helps you obtaining and understandingAttack Surface.The main goal is to gathering infromation from search engines for Internet-connected devices (https://censys.io/,https://www.shodan.io/).
It scraps data about Common Vulnerabilities and Exposures (CVE), Common Weakness Enumeration (CWE) and also has database where CVEs are mapped to CWE.It returns data about local machine - local installed softwares (from Windows Registry), local network information (python libraries, popular cmd commads).For now application has also simple tools like hash calcualtor, shannon entropy calculator and very simple port scanner.
More cryptography-math tools and reconnaissance scripts are planned.Lookhttps://www.facebook.com/ncybersec/posts/1671427243027993Realtion beetwen CWE and CVE - sarenka data feederGenerating this file takes a long time e.g: 702.5641514all CWE Ids with descriptionhttps://raw.githubusercontent.com/pawlaczyk/sarenka_tools/master/cwe_all.jsonall CVE Ids with descriptionIn progressget all CVE Ids by CWE IdIn progressInstallationDescription in progressGetting startedDescription in progress
Sarenka is local web application for Windows.ConfigRirst release gathers data from two search engines.
example sarenka/backend/connectors/credentials.json{"censys":{"base_url":"https://censys.io/","API_ID":"<my_user>","Secret":"<my_api_key>","API_URL":"https://censys.io/api/v1"},"shodan":{"base_url":"https://www.shodan.io/","user":"<my_user>","api_key":"<my_api_key>"}}Featuresgets data fromhttps://censys.io/by ipget data fromhttps://www.shodan.io/by ipgetDNSdatagetWHOISdatabannergrabbingfindCVEsbyCWEgeneratre pdf reportYou can also:calculatehashesbased on user stringcalculateshannon entropybased on user stringcheck isportopen|closed (instead always use nmap if you can - it's slow)Suggestions are welcomeWhant some feature, other tool, library functionality?Have any idea or question?Don't hesitate to contact.DatabaseThis is tricki part, because we have 863 sqlite3 database files: default, CWE-NONE (some CVE hasn't cwe_id eg.: CVE-2013-3621) and 861 individual for CWEsTechDescription in progress.SARENKA uses a number of open source projects to work properly on:Renderforest- logo generatorgawk- python manage.py migrate --database CWE_IDchocolateyPyCharm- Community EditionTechnology- descriptionTechnology- descriptionTechnology- descriptionTechnology- descriptionTechnology- descriptionTechnology- descriptionTechnology- descriptionTechnology- descriptionTechnology- descriptionTechnology- descriptionAnd of course SARENKA itself is open source with apublic repositoryon GitHub.Planned featuresRewrite documentation in English (end of 2021)trello/ github instead of JiraCover 100% code by teststyping backenddocument all functions and classDockeronline demoJenkinsGraphQLSelenium ScrapersMore pentesting toolsGoogle DorksAbstract Algebra calculatorNumber Theory calculatorServer certificate validatortests on LinuxNLPd3js visualizationsalterntive pure version in command lineSCI/CD Toolshttps://circleci.com/https://github.com/snyk-botTestsTested on Windows 10DocumentationTill end of March, 2021 documentation will be available only in Polish!
The documentation is availabehere.AuthorsInstallationRun the following to install:pipinstallsarenkaUsagefromabstract_algebraimportsay_hello# Generate "Hello, World!"say_hello()# Generate "Hello, Everybody!"say_hello("Everybody")Developing sarenkaTo install sarenka, along with the tools you need to develop and run tests, run the following in your virtualenv:$pipinstall-e.[dev]ContactLicenseSARENKA islicensedunder theMIT License.