epiphany: pre-DDoS security assessment tool
Epiphany
Epiphany – is a pre-engagement \ self-assessment tool to identify weak spots of a web property from a DDoS attacker perspective.
- In the first stage, the tool crawls pages, enumerates POST and GET requests.
- On the second stage: Epiphany records response time for each page and detects ones that are most vulnerable for potential DDoS attacks.
- Also, Epiphany performs heuristic discovery whether pages are cached or not.
Epiphany allows a clear understanding of a DDoS attack surface to build high-quality test cases for the DDoS assessment and recommendations for remediation and control improvements.
Installation
git clone https://github.com/Cyberlands-io/epiphany.git
cd epiphany
pip3 install -r requirements.txt
Docker
docker build -t epiphany .
docker run -v /tmp/:/app/reports/ epiphany google.com payloads
Use
Disclamer
Epiphany should be used for authorized DDoS security assessment and/or nonprofit educational purposes only. Any misuse of this software will not be the responsibility of the author or of any other collaborator. Use it at your own networks and/or with the network owner’s permission.
Copyright (C) 2021 Cyberlands.io & excellencenatural
