VulnMapAI

VulnMapAI combines the power of nmap’s detailed network scanning and the advanced natural language processing capabilities of GPT-4 to generate comprehensive and intelligible vulnerability reports. It aims to facilitate the identification and understanding of security vulnerabilities.

Features

• Automated Network Scanning: Uses Nmap for automated discovery and scanning of systems.
• Exploit Suggestions: Offers suggestions for potential exploits based on discovered services and versions.
• Report Generation: Creates comprehensive reports based on discovery and suggested exploits.
• Metasploit Integration: Integrates with Metasploit for searching and verifying exploits.
• Multi-Process Scanning: Leverages multi-process capabilities for efficient network scanning.

Getting Started

Prerequisites

• Python 3.x
• Metasploit Framework
• Nmap
• Required Python libraries: httpx, pymetasploit3

OR

• Docker

Usage

For hackers:

• Run the image (command crafted to use against HackTheBox/TryHackMe machines)

docker run -it \
    -e  OPENAI_API_KEY="sk-.." \
     -v $(pwd):/app \
    --sysctl net.ipv6.conf.all.disable_ipv6=0 \
    --cap-add NET_ADMIN \
    --cap-add SYS_MODULE \
    --device /dev/net/tun:/dev/net/tun \
    --entrypoint=/bin/bash -p 1337:1337 quantumcrack/vulnmapai-final:latest

• Run tmux, then openvpn lab_your_username.ovpn, then Ctrl+b and d, you should be back to the main terminal
• Run python main.py TRYHACKME_MACHINE_IP --top_ports 500. Happy hacking!

For developers:

• Clone the project and change directory git clone https://github.com/davidalami/VulnMapAI.git && cd ./VulnMapAI
• Build the image DOCKER_BUILDKIT=1 docker build -f build/final_image/Dockerfile -t quantumcrack/vulnmapai-final:latest .
• Run the image in interactive mode, pass a valid openai API key as an environment variable docker run -it --entrypoint=/bin/bash -e "OPENAI_API_KEY=sk-.." -v $(pwd):/app -p 1337:1337 quantumcrack/vulnmapai-final:latest
• Pass target IP addresses to the python script, like python main.py 127.0.0.1 --top_ports 500 and make yourself a coffee!

Accessing the report

Once the scanning process completes, the web application powered by Flask becomes accessible. You can view the generated report by opening your web browser and navigating to http://localhost:1337/.

Support

If you find any bugs or have feature requests, please open an issue detailing the bug or feature.

Disclaimer

This application is intended for educational and lawful activities only. Users are responsible for ensuring all activities conform to applicable local, state, and federal laws and regulations. We assume no responsibility for any misuse or damage caused by this program.

Acknowledgements

We would like to acknowledge the developers of the utilized libraries and tools, such as Metasploit and Nmap, for their significant contributions to the cybersecurity community.