Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support to track module stealth in metadata #183

Merged
merged 9 commits into from
Sep 25, 2020
Merged

Add support to track module stealth in metadata #183

merged 9 commits into from
Sep 25, 2020

Conversation

kpcyrd
Copy link
Owner

@kpcyrd kpcyrd commented Sep 13, 2020

This allows adding:

-- Stealth: <value>

to the modules metadata to document how noisy the module is.

Valid values:

  • passive: No traffic is sent directly to the target. This includes http requests, but also dns traffic and syn packets. Running a passive module should be undetectable by the target. I'm not sure if social media modules (-- Source: accounts) should be considered passive.
  • offline: The network is not used at all. Definitely undetectable by the target. A module like this would probably request, process and update data that was added by other modules.
  • loud: The module is very aggressive and likely to cause alerts. This may involve bruteforcing directories with http requests or subdomains, or anything that may cause emails to be sent (for example password resets).
  • normal: The default if nothing is specified. You'd only use this for something like pkg list --stealth normal.

This still needs proper documentation for readthedocs.

It should also be possible to do:

sn0int --stealth passive

which would prevent running any modules that aren't offline or passive. A user would need to overwrite this with run --stealth normal.

Related to #170.

@kpcyrd kpcyrd mentioned this pull request Sep 13, 2020
@kpcyrd kpcyrd merged commit b09c820 into master Sep 25, 2020
@kpcyrd kpcyrd deleted the stealth branch September 25, 2020 21:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant