Shulou(Shulou.com)05/31 Report--

This article is about what kind of tool Asnap is. The editor thinks it is very practical, so share it with you as a reference and follow the editor to have a look.

Asnap

Asnap is a powerful network reconnaissance tool, which periodically scans the IPv4 or IPv6 addresses in the target organization, and regularly updates the network structure data of the target organization, which helps researchers to perform automated initial port and service scanning, and provides more abundant data during the network reconnaissance phase of penetration testing.

Tool installation precompiled code

If you have installed the Go environment on your device and configured the $PATH environment variable, you can run the following command directly:

Go get-u github.com/paradoxxer/asnap

If you want to use precompiled code, you also need to download "move.sh" and "nmap.sh" files and store them in the same directory as asnap.

To download the database that Asnap uses to search for data, you need to provide a key. To get a free key, you can click [here] to register and generate your own license key. Next, create a "asnap_conf.txt" file in the same directory as asnap and copy the key to the first line of the "asnap_conf.txt" file:

Echo 'insert key' > asnap_conf.txt

To use the port scan feature, you also need to install and configure the Nmap tool on the device:

* Debian-based distribution system sudo apt install nmap* macOS brew install nmap* based on Arch distribution system sudo pacman-S nmap builds the source code by itself (recommended)

First of all, researchers need to clone the source code of the project locally using the following command:

Git clone git@github.com:paradoxxer/asnap.git

Next, click [here] to install Golang, or install Go directly in your package management tool:

Sudo apt install golang

After downloading the source code for the project, change to the directory path where the project is located in the command line window, and then run the following command:

Go build

After the above command is run, the source code for Asnap will be generated. After building the code, create a file called "asnap_conf.txt" in the same directory as Asnap, and add the previously requested key to the first line of the file:

The echo 'insert key' > asnap_conf.txt tool uses the sample Usage of. / asnap:-download Download database for the first usage.-update Update downloaded database. (Geolite databases updates once a week.)-search Specify search.-ipv4 Specify ipv4 database to search.-ipv6 Specify ipv6 database to search.-company Search by company name.-asn Search by as number.-outfile Specifies a name for the output text. By default, output file is named: MM-DD-YYYY_out.txt-infile Use specified .txt file as input. Asnap will iterate every line, and treats them as company names and searches specified database with given inputs.-nmap Passes found ip addresses to nmap. Examples: "$asnap-download"-> Downloads database with given key For the first time. "$asnap-update"-> Updates database. "$asnap-search-ipv4-company=" example "- > Search ipv4 database by company name" example "" $asnap-search-ipv6-asn 13337 "- > Search ipv6 database by as number" 13337 "" $asnap-search-ipv4-company= "github"-outfile / path/to/output/file "- > Search ipv4 database by company name" test "and save output to specified path." $asnap-search-ipv4-infile / path/to/input/ File.txt-nmap "- > Give a list of company names as input Search it inside ipv4 database and pass found ip addresses to nmap for port scanning. Working with scen

You can choose to run Asnap manually or use Cron tasks to automate Asnap execution. For example, you can use the-infile parameter to provide an input file, and all you need to do is check the output file and modify the input file regularly as needed. By default, the output file naming convention for Asnap is "MM-DD-YYYY_out.txt".

Thank you for reading! This is the end of the article on "what is Asnap?". I hope the above content can be helpful to you, so that you can learn more knowledge. if you think the article is good, you can share it for more people to see!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.