Avain Versions Save

A Modular Framework for the Automated Vulnerability Analysis in IP-based Networks

v0.1.3

3 years ago

Added

  • SQL Injection detection module
  • SMB enumeration module
  • WPScan module
  • CVE correlation module additionally retrieves Exploit DB IDs
  • Regexes of paths not to crawl / visit can be specified via config
  • Add globally reachable configuration profiles
  • Add alternative configurations
  • Wrapper script around CVE correlation module that enables usage outside of AVAIN framework
  • Kill function for modules
  • Previous output directory can be specified as input
  • Sample result and demonstration video

Changed

  • Overall accuracy of CVE correlation module was improved
  • In the CVE correlation module, the retrieval of CVEs where the queried CPE is not the primarily vulnerable software can be turned on and off via the config
  • AVAIN explicitly cannot run twice at the same time
  • The installation script explicitly removes the NVD database before reinstalling it to cope with DB schemata updates
  • --non-verbose flag is now the --quiet flag
  • -sN flag now means --separate-networks instead of --single-network

Fixed

  • Various small bugs

v0.1.2

4 years ago

Added

  • A very detailed wiki
  • All Hydra output is now printed in real time to the screen

Changed

  • Greatly shrink README and refer to respective wiki sites
  • Hydra SSH is now by default configured to use only 4 tasks
  • The user agent for the web/crawler module is now by default configured to use a Linux UA