English | 中文
Scope Sentry is a tool with functions such as asset mapping, subdomain enumeration, information leakage detection, vulnerability scanning, directory scanning, subdomain takeover, crawler, and page monitoring. By building multiple nodes, users can freely choose nodes to run scanning tasks. When new vulnerabilities emerge, it can quickly check whether the concerned assets have related components.
Distributed Implementation Reference Articles: https://mp.weixin.qq.com/s/xfgRxUjljoQ8KzacblktxA
Server Recommendation: lightnode
Server：python - FastApi
Scan：go
Front-end：vue - vue-element-plus-admin
- Official Website: https://www.scope-sentry.top
- Github: https://github.com/Autumn-27/ScopeSentry
- Scanner source code: https://github.com/Autumn-27/ScopeSentry-Scan
- UI source code: https://github.com/Autumn-27/ScopeSentry-UI
- Plugin Market: Plugin Market
- Plugin Template：https://github.com/Autumn-27/ScopeSentry-Plugin-Template
git clone https://github.com/Autumn-27/ScopeSentry.git
cd ScopeSentry
# Change the MongoDB and Redis account passwords in the. env file.
docker-compose -f single-host-deployment.yml up -d
After running, there will be four containers: mongodb, redis, scope-sentry (server), and scopesentry-scan (scan). By default, there will be one scanning node.
View the initial user password and the secondary verification password of the plug-in
docker logs scope-sentry
Add new nodes(Optional)
git clone https://github.com/Autumn-27/ScopeSentry-Scan.git
cd ScopeSentry-Scan/build
# Edit the connection information for MongoDB and Redis in the .env file. NodeName is the node name, and each node name should be unique (if it is empty, it will be randomly generated, and you can change the name in the web interface).
docker-compose -f scan-docker-compose.yml up -d
- Plugin System (Add any tool through extension)
- Subdomain Enumeration
- Subdomain Takeover Detection