Chmod351/radar

GitHub: Chmod351/radar

一个基于 Bun 和 TypeScript 的高性能侦察引擎,通过结构化数据管道实现对目标资产的自动化发现、分类和优先级评估。

Stars: 1 | Forks: 0

``` _______ _______ ______ _______ _______ ( ____ )( ___ )( __ \ ( ___ )( ____ ) | ( )|| ( ) || ( \ )| ( ) || ( )| | (____)|| (___) || | ) || (___) || (____)| | __)| ___ || | | || ___ || __ ) | (\ ( | ( ) || | ) || ( ) || ( \ ) | ) \ \__| ) ( || (__/ )| ) ( || ) \ \ |/ \__/|/ \|(______/ |/ \||/ \| ``` # RADAR:侦察与高级数据分析运行时 RADAR 是一个被动和主动侦察引擎,旨在用于攻击面的早期检测。与通用扫描器不同,RADAR 实现了一个 TypeScript 类型的数据 pipeline,用于规范化资产并通过基础设施逻辑对目标进行分类。 # 克隆仓库: ```git clone https://github.com/Chmod351/radar-osint cd radar``` 1. 构建镜像 在项目根目录下,执行: ```docker build -t radar .``` 2. 运行扫描 `javascript docker run --rm -it -v $(pwd):/app --entrypoint bun radar run src/app/use-cases/index.ts target.com` ![]() ## 正文: ``` { { host: "domain.com", ip: "50.000.000", app_status: "PENDING", whois_raw: null, asn: "AS66666", asn_owner: "50.000.0.0/00", country: "US", url: "https://www.www.com", status_code: 301, title: "301 Moved Permanently", webserver: "Apache/2.4.6 (CentOS)", cdn: 0, infra_type: 2, infra_status: 4, priority: 0, action: 1, attemps:[{ method:"HEAD", header:null, status:0, size:0, timestamp:new Date().toISOString() }], http_stack: [ { "name": "Apache", "version": "2.4.38" }, { "name": "Google-Analytics", "version": "Universal" }, ], open_ports: [ { "port": 53, "protocol": "tcp", "service": "domain" }, { "port": 80, "protocol": "tcp", "service": "http" }, { "port": 443, "protocol": "tcp", "service": "https" }, ], vulnerabilities: ["string"], http_intel: { protocol: 0, status: 0, security:{ "hsts": false, "csp": false, "xfo": false, "nosniff": false }, , server: null, poweredBy: null, cookies: false, error: null, }, whois: { registrar: null, creationDate: null, expirationDate: null, nameServers: [], status: [], emails: null, raw: "", }, } } ``` # ⚠️ 免责声明 本项目尚未完成且处于不断更改之中 此工具旨在用于资产管理和授权的安全审计。在未经同意的系统上使用所带来的责任由用户自行承担
标签:ASM, Bun, C2日志可视化, Docker, ESC4, GitHub, HTTP探测, OSINT, TypeScript, WHOIS查询, 主动侦察, 侦察引擎, 协议探测, 基础设施分析, 安全工具库, 安全插件, 安全防御评估, 实时处理, 密码管理, 指纹识别, 插件系统, 数据统计, 目标分类, 端口扫描, 网络安全, 自动化攻击, 被动侦察, 请求拦截, 隐私保护