Chmod351/radar
GitHub: Chmod351/radar
一个基于 Bun 和 TypeScript 的高性能侦察引擎,通过结构化数据管道实现对目标资产的自动化发现、分类和优先级评估。
Stars: 1 | Forks: 0
```
_______ _______ ______ _______ _______
( ____ )( ___ )( __ \ ( ___ )( ____ )
| ( )|| ( ) || ( \ )| ( ) || ( )|
| (____)|| (___) || | ) || (___) || (____)|
| __)| ___ || | | || ___ || __ )
| (\ ( | ( ) || | ) || ( ) || ( \ )
| ) \ \__| ) ( || (__/ )| ) ( || ) \ \
|/ \__/|/ \|(______/ |/ \||/ \|
```
# RADAR:侦察与高级数据分析运行时
RADAR 是一个被动和主动侦察引擎,旨在用于攻击面的早期检测。与通用扫描器不同,RADAR 实现了一个 TypeScript 类型的数据 pipeline,用于规范化资产并通过基础设施逻辑对目标进行分类。
# 克隆仓库:
```git clone https://github.com/Chmod351/radar-osint cd radar```
1. 构建镜像
在项目根目录下,执行:
```docker build -t radar .```
2. 运行扫描
`javascript docker run --rm -it -v $(pwd):/app --entrypoint bun radar run src/app/use-cases/index.ts target.com`
![]()
## 正文:
```
{
{
host: "domain.com",
ip: "50.000.000",
app_status: "PENDING",
whois_raw: null,
asn: "AS66666",
asn_owner: "50.000.0.0/00",
country: "US",
url: "https://www.www.com",
status_code: 301,
title: "301 Moved Permanently",
webserver: "Apache/2.4.6 (CentOS)",
cdn: 0,
infra_type: 2,
infra_status: 4,
priority: 0,
action: 1,
attemps:[{
method:"HEAD",
header:null,
status:0,
size:0,
timestamp:new Date().toISOString()
}],
http_stack: [
{
"name": "Apache",
"version": "2.4.38"
},
{
"name": "Google-Analytics",
"version": "Universal"
},
],
open_ports: [
{
"port": 53,
"protocol": "tcp",
"service": "domain"
},
{
"port": 80,
"protocol": "tcp",
"service": "http"
},
{
"port": 443,
"protocol": "tcp",
"service": "https"
},
],
vulnerabilities: ["string"],
http_intel: {
protocol: 0,
status: 0,
security:{
"hsts": false,
"csp": false,
"xfo": false,
"nosniff": false
},
,
server: null,
poweredBy: null,
cookies: false,
error: null,
},
whois: {
registrar: null,
creationDate: null,
expirationDate: null,
nameServers: [],
status: [],
emails: null,
raw: "",
},
}
}
```
# ⚠️ 免责声明
本项目尚未完成且处于不断更改之中
此工具旨在用于资产管理和授权的安全审计。在未经同意的系统上使用所带来的责任由用户自行承担
标签:ASM, Bun, C2日志可视化, Docker, ESC4, GitHub, HTTP探测, OSINT, TypeScript, WHOIS查询, 主动侦察, 侦察引擎, 协议探测, 基础设施分析, 安全工具库, 安全插件, 安全防御评估, 实时处理, 密码管理, 指纹识别, 插件系统, 数据统计, 目标分类, 端口扫描, 网络安全, 自动化攻击, 被动侦察, 请求拦截, 隐私保护