Information Gathering Tools – Ghost Eye

-

 

Information Gathering Tools – Ghost Eye 

1.Tool Description

GhostEye is a Python3 based information gathering, footprinting, scanning, and reconnaissance tool. It collects information about the target and provides us with detailed information about our goals.

Options Provided: 

•        EtherApe – Graphical Network Monitor (root)

•        DNS Lookup

•        Whois Lookup

•        Nmap Port Scan

•        HTTP Header Grabber

•        Clickjacking Test – X-Frame-Options Header

•        Robots.txt Scanner

•        Cloudflare Cookie scraper

•        Link Grabber

•        IP Location Finder

•        Detecting CMS with Identified Technologies

•        Traceroute

•        Crawler target URL + Robots.txt

•        Certificate Transparency log monitor

2. Features

It is an easy-to-use tool which provide an option to select for our attack preference. It includes an Etherape feature, which is a Graphical Network Monitor and a packet sniffer that collects and displays information graphically which supports Ethernet, FDDI, Token Ring, ISDN, PPP, SLIP, and WLAN devices, as well as several encapsulations. It can display traffic that has been filtered and read packets from files as well as actual network data.

3.Installation steps with screen Shots and Commands.

1.  Install Nmap and EtherApe if it isn’t present in your system.

Command for Debian and its distros: sudo apt install etherape nmap dnsutils gnome-terminal httpie mtr

After installing Etherape sometimes a GNOME error can occur, for which you install: apt install libgnomeui-0: amd64

 

 

 

2.  Clone the repository from git and navigate to the folder cloned.


3.Check for requirements.txt and install the requirements if not present in system.

 


4. Run ghost eye using python.

 

References

 

https://github.com/BullsEye0/ghost_eye

https://www.geeksforgeeks.org/how-to-install-ghost_eye-tool-in-kali-linux/

 


Comments

Post a Comment

Popular posts from this blog

How to Installing and setup GoPhish on Kali Linux

-
Image
  How to Installing and setup GoPhish on Kali Linux Gophish is an open-source phishing toolkit designed for security professionals to conduct penetration tests and awareness training. Developed with user-friendliness in mind, Gophish allows users to easily create, launch, and manage phishing simulation campaigns. It provides a web-based interface where users can design customizable email templates, landing pages, and email lists. Gophish’s real-time reporting and analytics capabilities enable detailed tracking of campaign metrics such as email open rates, link clicks, and submitted credentials, helping organizations assess their vulnerability to phishing attacks. Its flexibility and ease of integration make it a valuable tool for enhancing cybersecurity awareness and testing organizational defenses against social engineering threats. The tool supports various deployment environments, ensuring adaptability to different IT infrastructures. Gophish's comprehensive features make it...
Read more

Http response division: understanding, detecting and stopping a classic web exploitation

-
Image
The HTTP response partition is a web application vulnerability that occurs when unvalidated user input HTTP response is included in the header. This defect allows an attacker to inject an additional HTTP header or manipulate the structure of an HTTP reaction. It often results in cross-site scripting (XSS), web cache poisoning, or redirect attacks. While the HTTP response partition has been around since the early 2000s, it is relevant today due to poorly validated web applications and its appearance in APIs. Modern structures reduce the possibility of such weaknesses, but misunderstandings, old libraries, or custom implementation can still make applications weak. This blog examines h istory, technical functioning, detection methods, attack scenarios, and prevention strategies for HTTP response division. History of the HTTP Reaction Division The vulgarity was first publicly documented by security researcher Amit Klein in 2004. He displayed that improper handling of carriage returns (CR)...
Read more

DOM-based XSS: exploiting weaknesses in client-side script

-
Image
With the development of dynamic web applications, there has been a lot of change in the security scenario. One of the more powerful forms of cross-site scripting (XSS) is DOM-based XSS , a vulnerability that exploits weaknesses in a client-side script. Unlike stored XSS or reflected XSS , including server-side processing, DOM-based cross-site scripting is completely within the browser, making it more elusive and challenging to detect. In this broad blog, we will find out the nature of DOM-based XSS , how the attackers exploit it, real-world landscape, ways to detect, and find out the best strategies to protect your web applications. This guide is designed to inform developers, penetrated examiners and security professionals about the importance of security of client-side code. What is DOM-based XSS? DOM-based XSS (Document Object Model-Site scripting) is a type of XSS vulnerability, where the dom atmosphere in the browser using client-side JavaScript is triggered by modifying the DOM a...
Read more

Unpacking host header injection: hidden danger in http header

-
Image
In the vast world of web security, developers often focus on validating user inputs, securing databases, and patching server weaknesses. However, the attackers often find their way through less clear channels—an unseen vector HTTP header . In particular, host header injection is a subtle yet powerful technique that can be exploited to compromise web applications with unexpected methods. This blog examines the mitigation of history, mechanics, detection, exploitation, and host header injections—one of the least assault vectors in the scope of HTTP-based communication. Understand the HTTP host header Each HTTP request includes a series of headers. The most important of these is the host header , which specifies the domain name of the server requested by the client.  For example: vbnet GET / HTTP/1.1 Host: example.com Web server hosts use host headers for proper root requests, especially in shared hosting environments. Unfortunately, if the application or server does not validate t...
Read more

Mass Assignment in API: Web application silent killer of security

-
Image
In a world with an ever-expanding world of digital communication and software integration, APIs (application programming interfaces) act as bridges, allowing systems to talk to each other. However, developers run as scalable and feature-rich applications as developers, and some often microscopic yet ignored disastrous weaknesses. Among these, mass assignments stand as a silent but powerful safety threat, especially in modern comfortable APIs. The weaknesses of mass assignment allow malicious users to modify or inject the objects that should not have access. These weaknesses can compromise sensitive data, change the roles of the user, or provide unauthorized access—all need to break "traditionally" without the attacker. This blog will turn into h istory, work, exploitation, detection, and mitigation of large-scale assignment weaknesses. Understanding Mass Assignment Mass assignment, also known as over-posting , occurs when an API automatically binds data from user input to p...
Read more