nos3curity / raven Goto Github PK

View Code? Open in Web Editor NEW

5.0 1.0 4.0 37.46 MB

Go 54.82% Smarty 4.48% HTML 32.99% CSS 2.65% Python 1.39% JavaScript 3.67%

raven's Introduction

raven

main source of truth for a cyber competition red team

https://youtu.be/p0mZmnl792o?si=IbfBX9GMjRMoLJLl

testing workflow

go to http://localhost:8080/
login using the password from the console or db
go to http://localhost:8080/teams
add a team and call it brice
add a network to team brice with cidr 10.100.10.0/24
go to http://localhost:8080/uploads
upload sample example.xml file as nmap xml
go to http://localhost:8080/teams/1

build instructions

clone or download zip:

git clone https://github.com/nos3curity/raven

install the bee cli tool:

go install github.com/beego/bee/v2@latest

cd into folder:

cd raven/

init the module and download libraries:

go mod init raven
go mod tidy

run the app:

bee run

documentation

primary functions

these functions exist to manipulate model objects like add, remove, get, etc.

the function names should be self-explanatory. see model code for usage:

raven's People

Contributors

Stargazers

Watchers

Forkers

nasirhm ianalin123 sumiran35

raven's Issues

Feature Request: Export of host ips scanned

Functionality to export a list of hosts that were scanned

Feature request: Hosts from previous scans continue to appear in network

Oftentimes, during competitions, hosts may experience downtime or issues with connectivity. Currently, when a new nmap scan is imported by the tool, it does not show hosts that were previously alive in the table which may be misleading

[Testing] - Write Unit and Integration Tests for existing codebase

Initialize test cases using Convey or with another tool which is a better fit for this usecase.

highlight system

need a way to highlight boxes in the UI based on some conditions important to us:

if there is a print server on the box
if there is rtsp on the box
if a new port appeared on the box compared to the last scan
if the system is owned within sliver or cobalt strike
if the system has no open ports, grey it out
highlight if there is a scored service on the box

copy ips

need copy buttons next to ip addresses.

also need to be able to export all ips from a team or network.

When entering in an invalid CIDR and creating a new team, team creation is still successful

Upon hitting new team it says invalid CIDR which is expected.

Going back to the dashboard we see Team 9 is still created.

Feature request: Paste image from clipboard for loot

Currently, raven only allows for the upload of files for loot. I would like to be able to paste a screenshot I have from clipboard as this would save time and allow for quick and easy reporting

dockerize this

docker

deleting teams

need a button on the frontend to delete a team

[CI] - Write a Github Action for go-fmt checking on PRs

Write a Github Action which is triggered when a commit is made in a PR which checks if the code satisfies the go fmt formatting requirements.

why subnet collapsed by default?

please fix @soh3ee

the subnet should expand automatically, not be collapsed. its about speed

Feature Request: Timestamps for scans

Timestamps for when the nmap scan was performed

ips are out of order

make it in order pls

Issue: Loot upload functionality does not work

Loot upload functionality does not work when uploading artifacts to the Raven server

Feature request: Ports in numerical order

Currently the tool does not have ports in numerical order. This may lead to confusion during a test when spot checking ports and services running on a host

no icon for no OS box???

please fix @soh3ee no icon

[CI/CD] - Setup a Github Actions CD to deploy Raven on Heroku

Setup a CD pipeline which deploy's Raven on Heroku whenever there's a push on the main branch.

gowitness view

add a view for each team where we can see all screenshots from their gowitness scan at a glance

LLM assistant

have frontend buttons that send commands to the AI assistant:

suggest creds to spray
suggest systems to attack
suggest ports to attack

feature request: directory busting routes

ingest feroxbuster output and stuff

Feature request: Improved Summary View

Currently Raven has large icons designating hosts and Windows and Linux which clutter the web interface when there are significant hosts. In an example if the icons were in-line with the IP address, additional functionality such as adding an icon next to a system would prevent the UI from being cluttered and improve readability and understanding for the end user