1
0
Fork
You've already forked CySec-Server
0
No description
This repository has been archived on 2019年06月03日. You can view files and clone it, but you cannot make any changes to its state, such as pushing and creating new issues, pull requests or comments.
JavaScript 72.8%
Python 10.9%
HTML 8.3%
CSS 7.8%
Find a file
2019年01月18日 07:06:39 +01:00
accounts experimental improvements 2019年01月18日 07:00:47 +01:00
activity_feed prepare some new features and fix bugs 2018年11月20日 19:50:23 +01:00
api identify which vulns,hosts and services were discovered by command 2018年12月17日 16:47:40 +01:00
blogging improve blog api 2018年11月23日 04:32:30 +01:00
bug_bounty_mode fixes #21 2018年12月23日 06:39:32 +01:00
bughunting experimental improvements 2019年01月18日 07:00:47 +01:00
cymailbox Mdb 2018年11月03日 05:38:41 +00:00
cysec_server experimental improvements 2019年01月18日 07:00:47 +01:00
pentesting identify which vulns,hosts and services were discovered by command 2018年12月17日 16:47:40 +01:00
public_pages add link to bug bounty index page 2018年12月02日 17:19:00 +01:00
static implements #12 2018年11月30日 18:19:18 +01:00
stats Resolve "make central container full height" 2018年11月14日 14:23:50 +00:00
templates fixes #5 2018年12月07日 07:51:47 +01:00
todoz prepare some new features and fix bugs 2018年11月20日 19:50:23 +01:00
utils update docker files and add file for running cysec server as hidden service V3 2018年11月27日 21:30:45 +01:00
.gitignore move settings template into project root 2018年12月02日 12:59:40 +01:00
.gitlab-ci.yml use python 3.6 2018年11月03日 14:39:31 +01:00
disclose_vulnerabilities.py closes #114 2018年08月08日 22:10:31 +02:00
docker-compose.yml move settings template into project root 2018年12月02日 14:34:49 +01:00
Dockerfile add new chart 2018年09月22日 11:25:26 +02:00
LICENSE add license 2018年07月25日 17:50:24 +02:00
local_settings.template.py move settings template into project root 2018年12月02日 12:59:40 +01:00
manage.py remove dev settings file 2018年07月28日 17:07:19 +02:00
ReadMe.md experimental improvements 2019年01月18日 07:00:47 +01:00
requirements.txt update api after client prototyping 2018年11月25日 09:40:21 +01:00
run_as_tor_hidden_service_v3.sh move settings template into project root 2018年12月02日 14:34:49 +01:00

Description

This is the server part of the CySec-Framework. The server provides a webinterface for easily managing your pentestings or bug bounty vulnerabilities.

This is still beta and may contain lot of bugs and only basic UX for now.

I plan to include other features in future like a client application ;)

Please report bugs and other ideas through the Bug-Tracker

Setup

See wiki pages for setup instructions

Features

  • Pentesting

    • Unlimited amount of pentesting projects
    • Add other users to your project and specify a role like "pentester" or "project admin"
    • Tasks that supports Markdown. Tasks can optionally be assigned to a user
    • create pentesting reports based on the discovered information and vulnerabilities
    • optionally encrypt reports using AES-GCM or ChaCha20Poly1305 (server-side)
    • Dashboard with latest activities and statistics

  • Bug Bounty

    • Bug Hunters can win awards for securing websites
    • diclose vulnerabilities within 30 days
    • bug hunter can increaase dislosure deadline
    • store discovered bugs as draft
    • optionally submit social media posts, if vulnerability was submitted (only mastodon is supported for now)
    • show bug details only using sharable link, which prevent domain administration to create accounts on the server
    • details of not disclosed or fixed vulnerabilities are hidden for other users
    • sending email to site admins for vulnerability notification

  • Landing Page

    • Customize Carousel images and text
    • displays statistical stuff using charts (i.e.: Top Bug Hunters, Top Vulnerabilities,...)

  • Public user profile pages with awards included

  • Public Profile Page with user stats

  • enable or disable registration

  • REST-API allows external tools to interact with our service

  • Users can create blogs ( with markdown support )

  • Encrypted mailboxes for users ( using PGP )

there are more features planned. see issues page.