chudry/xerror

fully automated pentesting tool

Xerror

Xerror is an automated penetration tool , which will help security professionals and non professionals to automate their pentesting tasks. Xerror will perform all tests and, at the end generate two reports for executives and analysts.

Xerror provides GUI easy to use menu driven options.Iinternally it supports openVas for vulnerability scanning, Metasploit for exploitation and gives GUI based options after successful exploitation e.g Meterpreter sessoins. Building in python as major.

Xerror build on python2 as a primary language and Django2 as web framework along with, websockets(django channel) on celery server and Redis srver to achieve asynchronization. On front side it supports Djanog default template enging language which is jinga2 and jquery.

How to use this porject:
1.Activate virtual enviroment by using following command( make sure you have pre-installed py virtual env)
souce env/bin/activate
2. Start redis server
service redis-server start
3. start python srver
1. cd xerror
2. python manage.py runserver
4. start celery server( run this in new terminal)
1. cd xerror
2. celery -A xerror worker -l info
5. start msfrpc server for metasploit
msfrpcd -P 123 -S -a 127.0.0.1
6. start openvas server and set OMP server credientials to admin@admin 127.0.0.1 9392

You are goog to go

This is xerror Beta version, soon complete version will be uploaded with complete explanation and detail of each step ...

Contact : [email protected]

xerror's Issues

Install requirements not clear, problmes installing

Hi

I followed the instructions in your readme file, but wasn't able to install Xerror properly. Especially problems with Python2 and Dajngo were common.

Last step: Problem import module "channels" when I ran the command "python manage.py runserver".

Is there any chance you come up with more detailed install instructions?

Best regards.

System: Ubuntu 20.04, Python2

Nmap Background Process running

Hello,

I get the following error. What can I do to solve it?

[2023-02-01 10:27:41,376: WARNING/MainProcess] /usr/local/lib/python2.7/dist-packages/celery/fixups/django.py:265: UserWarning: Using settings.DEBUG leads to a memory leak, never use this setting in production environments!
warnings.warn('Using settings.DEBUG leads to a memory leak, never '

[2023-02-01 10:27:41,377: WARNING/MainProcess] celery@f59e334687f9 ready.
[2023-02-01 10:31:40,010: INFO/MainProcess] Received task: parsing.tasks.process_nmap[446d18ad-539b-4920-bc8e-40f6bb879a8b]
[2023-02-01 10:31:40,023: WARNING/Worker-3] [ NMAP ] ************************* Nmap Background Process running **************
[2023-02-01 10:31:40,023: WARNING/Worker-3] /opt/Xerror/xerror/reports/nm_144_192.168.0.198.xml
[2023-02-01 10:31:40,239: WARNING/Worker-3] [NMAP ] converting csv file
[2023-02-01 10:31:40,241: WARNING/Worker-3] [-] A an error occurred. The XML may not be well formed. Please review the error and try again: no element found: line 7, column 0
[2023-02-01 10:31:41,415: ERROR/MainProcess] Task parsing.tasks.process_nmap[446d18ad-539b-4920-bc8e-40f6bb879a8b] raised unexpected: WorkerLostError('Worker exited prematurely: exitcode 0.',)
Traceback (most recent call last):
File "/usr/local/lib/python2.7/dist-packages/billiard/pool.py", line 1175, in mark_as_worker_lost
human_status(exitcode)),
WorkerLostError: Worker exited prematurely: exitcode 0.

Best regards

HOW I CAN INSTALL THIS PERFECT TOOL IN BLACKARCH ?

HOW I CAN INSTALL THIS PERFECT TOOL IN BLACKARCH ?

From Xerror Support

Sorry if you are facing issues regarding installation and about uncomplete description, actually im working on Pro version.

Beta version is just a simple one but Pro version will be Pro, its complete Cloud Based open sourse project .

Pro version not just for offensive pentesting but also for defensive side where it supports ELK( wazuh) based complete SIEM solution, incident response and threat hunting features.

You can idealize this as a complete automated DevSecOps solution, which is not only going to hold DevOps pipline but also test/secure them from source code. You just have to come with source code, dockerize to deployment all the process gonna handle by tool like any one who only knows about code but dont know rest of the process testing+deployment.

You may thinking where the gosh offensive pentesting( all platforms ) ? Well, offensive testing is just a part of DevSecOps.

I'm also a student and if you have any suggestions/features to share with me( [email protected] )

Also if any one still have issues in Beta version reply to this comment, I'll try my best to resolve it.

ModuleNotFoundError: No module named 'settings'

How to fix?

This looks like an interesting project, is it still live?

All just checking before i take the plunge, is this project live?

How to fix it?

SMB Relay Attack

Can you please add support for the smb relay attack.

https://cqureacademy.com/blog/penetration-testing/smb-relay-attack

[error]TypeError: view must be a callable or a list/tuple in the case of include().

/usr/local/lib/python2.7/dist-packages/OpenSSL/_util.py:6: CryptographyDeprecationWarning: Python 2 is no longer supported by the Python core team. Support for it is now deprecated in cryptography, and will be removed in a future release.
from cryptography.hazmat.bindings.openssl.binding import Binding
/usr/local/lib/python2.7/dist-packages/OpenSSL/_util.py:6: CryptographyDeprecationWarning: Python 2 is no longer supported by the Python core team. Support for it is now deprecated in cryptography, and will be removed in a future release.
from cryptography.hazmat.bindings.openssl.binding import Binding
Performing system checks...

Unhandled exception in thread started by <function wrapper at 0x7f439aaec850>
Traceback (most recent call last):
File "/usr/local/lib/python2.7/dist-packages/django/utils/autoreload.py", line 228, in wrapper
fn(*args, **kwargs)
File "/usr/local/lib/python2.7/dist-packages/channels/management/commands/runserver.py", line 44, in inner_run
self.check(display_num_errors=True)
File "/usr/local/lib/python2.7/dist-packages/django/core/management/base.py", line 359, in check
include_deployment_checks=include_deployment_checks,
File "/usr/local/lib/python2.7/dist-packages/django/core/management/base.py", line 346, in _run_checks
return checks.run_checks(**kwargs)
File "/usr/local/lib/python2.7/dist-packages/django/core/checks/registry.py", line 81, in run_checks
new_errors = check(app_configs=app_configs)
File "/usr/local/lib/python2.7/dist-packages/django/core/checks/urls.py", line 16, in check_url_config
return check_resolver(resolver)
File "/usr/local/lib/python2.7/dist-packages/django/core/checks/urls.py", line 26, in check_resolver
return check_method()
File "/usr/local/lib/python2.7/dist-packages/django/urls/resolvers.py", line 256, in check
for pattern in self.url_patterns:
File "/usr/local/lib/python2.7/dist-packages/django/utils/functional.py", line 35, in get
res = instance.dict[self.name] = self.func(instance)
File "/usr/local/lib/python2.7/dist-packages/django/urls/resolvers.py", line 407, in url_patterns
patterns = getattr(self.urlconf_module, "urlpatterns", self.urlconf_module)
File "/usr/local/lib/python2.7/dist-packages/django/utils/functional.py", line 35, in get
res = instance.dict[self.name] = self.func(instance)
File "/usr/local/lib/python2.7/dist-packages/django/urls/resolvers.py", line 400, in urlconf_module
return import_module(self.urlconf_name)
File "/usr/lib/python2.7/importlib/init.py", line 37, in import_module
import(name)
File "/root/Xerror/xerror/xerror/urls.py", line 10, in
{'document_root': settings.MEDIA_ROOT}),
File "/usr/local/lib/python2.7/dist-packages/django/conf/urls/init.py", line 85, in url
raise TypeError('view must be a callable or a list/tuple in the case of include().')
TypeError: view must be a callable or a list/tuple in the case of include().

Django==1.11.29

By the way,python3.x may be more appropriate in the future

Why would this project be made with an EOL python version?

What a headache to get this thing running, not to mention requiring me to remove important components of python3 which literally everything else uses now...
Since you're not addressing any issues here I hope your official release of this thing is based on python3 because this is absurd

How to install it?

Add .gitignore remove .pyc files. Need to do chore