Automated attack surface mapper and vulnerability scanner

Sylvain Kerkour

Last update: Dec 16, 2022

Related tags

Security tools rust security security-audit attack rust-lang vulnerability infosec pentesting pentest offensive offensive-security security-tools vulnerability-scanning pentest-tool vulnerability-scanner black-hat black-hat-rust

Overview

Phaser

Automated attack surface mapper and vulnerability scanner

What is this?

Phaser is a high-performance and automated attack surface mapper and vulnerability scanner. Just point it to a target, and it will autimagically generate a report with everything it can finds, saving you hours of manual audit and pipping between different tools.

Want to learn how to use Rust to hack the planet? Phaser was extracted and improved from the chapters 2, 3, and 4 of my book Black Hat Rust, where, among other things, we learn how to build a fast async scanner.

Buy the book now!

One of the goals of phaser is to get you started once you finish the book. Either by helping you make your first Rust contribution, or by using it in your first bug hunting session.

Installation

Using cargo

$ cargo install -f phaser

Using Docker

$ docker pull ghcr.io/skerkour/phaser

Usage

# List modules
$ phaser modules
# Display scan options
$ phaser scan --help
# Scan a target
$ phaser scan --aggressive target.com

With Docker

$ docker run -ti ghcr.io/skerkour/phaser phaser scan --aggressive target.com

License

See LICENSE.txt.

You might also like...

Xori is an automation-ready disassembly and static analysis library for PE32, 32+ and shellcode

Comments

port scan now only returns open ports

Hello,

I think I found a little bug in the port scan. tokio::time::timeout will return a Result on completion. The returning result means if the future completes before the duration Ok is returned otherwise Err. If a connection to a port will result in a connection refused, than Ok is returned from tokio::time::timeout and the inner value is Err from TcpStream::connect. I changed the part so the port scan only returns open ports.

opened by jd84 1
Change target URL

In order to protect yourself and phaser from lawsuits, I think that it'd be smart not to include the address of a well known retail network in your black hat tool documentation

opened by tuxiqae 1

Automated attack surface mapper and vulnerability scanner

Related tags

Overview

Phaser

Automated attack surface mapper and vulnerability scanner

What is this?

Buy the book now!

Installation

Using cargo

Using Docker

Usage

With Docker

License

You might also like...

Xori is an automation-ready disassembly and static analysis library for PE32, 32+ and shellcode

🕵️‍♀️ Find, locate, and query files for ops and security experts ⚡️⚡️⚡️

Semi-automatic OSINT framework and package manager

A Comprehensive Web Fuzzer and Content Discovery Tool

A simple menu to keep all your most used one-liners and scripts in one place

link is a command and control framework written in rust

Rust library for building and running BPF/eBPF modules

telemetry aggregation and shipping, last up the ladder

unfuck is a utility and library for deobfuscating obfuscated Python 2.7 bytecode

Comments

port scan now only returns open ports

Change target URL

Owner

Sylvain Kerkour

Http request smuggling vulnerability scanner

💔 Heartbleed vulnerability exploit written in Rust

A simple scanner that loops through ips and checks if a minecraft server is running on port 25565

Automated property based testing for Rust (with shrinking).

🤖 The Modern Port Scanner 🤖

simple multi-threaded port scanner written in rust

A simple port scanner built using rust-lang

Dangerously fast dns/network/port scanner, all-in-one

A simple port sniffer(scanner) implementation with 🦀

Steals browser passwords and cookies and sends to webhook.