fast and reliable local vulnerability scanner

Initially developed as an internal tool for @5amu's day job, thanks to @cekout it became clear that the software could be generalized for a larger audience. So it became public. The project is heavily inspired by nuclei, but it targets another audience, such as professionals testing network objects with SSH or Telnet credentials.

Usage

usage: staresc [-h] [-d] [-nb] [-t TIMEOUT] (-f F | -cs CS | --test | -v) [-o pattern | -of FMT] {scan,raw,check} ...

Make SSH/TELNET PTs great again!
The connection string format is the following: schema://user:auth@host:port
auth can be either a password or a path to ssh privkey, specified as \\path\\to\\privkey

positional arguments:
  {scan,raw,check}      Staresc execution mode
    scan                Scan mode: execute plugins on target
    raw                 Raw mode: execute custom commands
    check               Check mode: check reachability

options:
  -h, --help            show this help message and exit
  -d, --debug           increase output verbosity to debug mode
  -nb, --nobanner       hide banner
  -t TIMEOUT, --timeout TIMEOUT
                        set timeout for connections
  -f F, --file F        input file containing 1 connection string per line
  -cs CS, --connection CS
                        connection string
  --test                test staresc integrity
  -v, --version         print version and exit
  -o pattern, --output pattern
                        export results in specified format
  -of FMT, --output-format FMT
                        format of results

Install

Using pip

pip install git+https://github.com/staresc/staresc.git

From the AUR

paru -S staresc

Compiled version

Download the latest version of the pyinstaller's compiled binary: https://github.com/staresc/staresc/releases/latest/