DarkAngel: fully automatic white hat vulnerability scanner

by do son · March 9, 2023

DarkAngel

DarkAngel is a fully automatic white hat vulnerability scanner, which can monitor hacker and bugcrowd assets, generate vulnerability reports, and send enterprise WeChat notifications.

Currently supported features：

Hackerone asset monitoring;
Bugcrowd asset monitoring;
Add user-defined assets;
Subdomain name scanning;
Website fingerprint identification;
Vulnerability scanning;
Automatic generation of vulnerability reports;
Enterprise WeChat notification scanning results;
The front end displays the scanning results;

Use

–scan-new-domain

$ python3 darkangel.py –scan-new-domain

Monitor the hacker and bugcrowd domain names and scan them (when using them for the first time, all the hacker and bugcrowd domain names will be added. Prepare when there are too many assets, and the scan takes a long time)

–add-domain-and-scan

$ python3 darkangel.py –add-domain-and-scan program-file-name1 program-file-name2 –offer-bounty yes/no

-Customized addition of scanning domain names and vulnerability scanning of these domain names -The file name is the name of the manufacturer, and the file memory needs to scan the domain name -The –offer-bounty parameter is required to set whether the domain name provides reward

After scanning, the subdomain name results will be stored in the /root/darkangel/vulscan/results/urls directory. They are stored in the bounty_temp_urls_output.txt, nobounty_temp_urls_output.txt document.

–nuclei-file-scan

$ python3 darkangel.py –nuclei-file-scan

Scan 20 url files with nuclei

URL list storage location

–nuclei-file-polling-scan

$ python3 darkangel.py –nuclei-file-polling-scan

Polling uses Nuclei to scan 20 url files. You can put the process in the background, poll, and scan, and listen for new vulnerabilities in the url list

–nuclei-file-scan-by-new-temp

$ python3 darkangel.py –nuclei-file-scan-by-new-temp nuclei-template-version

Listen for updates to the nucleus template. When updating, scan the url list

The current nuclear template version is 9.3.1

Execute the command to monitor the 9.3.2 version update

URL list storage location

–nuclei-file-scan-by-new-add-temp

$ python3 darkangel.py –nuclei-file-scan-by-new-add-temp nuclei-template-id

Monitor the update of the single template of nuclei. When updating, use this template to scan the url list. There is a time difference here. Sometimes, submit the template first, and then add the nuclei template after verification. When we have not yet joined, we have already listened and scanned. After scanning, the ID will automatically increase and listen and scan

Check the ID of the single template of Nuclei, which is 6296 here