screetsec/dracnmap

Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of options that can make the utility more robust and difficult to follow for new users. Hence Dracnmap is designed to perform fast scaning with the utilizing script engine of nmap and nmap can perform various automatic scanning techniques with the advanced commands.

What is Dracnmap ?

Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of options that can make the utility more robust and difficult to follow for new users. Hence Dracnmap is designed to perform fast scaning with the utilizing script engine of nmap and nmap can perform various automatic scanning techniques with the advanced commands.

Donate

• If this project very help you to penetration testing and u want support me , you can give me a cup of coffee :)
• 

Screenshot

-----------------------------------------------------------------------

📜 Changelog

Be sure to check out the [Changelog] and Read CHANGELOG.md

Getting Started

1. git clone https://github.com/Screetsec/Dracnmap.git
2. cd Dracnmap
3. chmod +x Dracnmap.sh
4. sudo ./Dracnmap.sh or sudo su ./Dracnmap.sh

❗ Requirements

• A linux operating system. We recommend Kali Linux 2 or Kali 2016.1 rolling / Cyborg / Parrot / Dracos / BackTrack / Backbox / and another operating system ( linux )

• Must install nmap

Tutorial ? or another tool ?

you can visit my channel : https://www.youtube.com/channel/UCpK9IXzLMfVFp9NUfDzxFfw

thefatrat , Backdoor Creator ( bypass av ) : https://github.com/Screetsec/TheFatRat

BUG ?

• Please Submit new issue
• Contact me
• Hey sup ? do you want ask about all my tools ? you can join me in telegram.me/offscreetsec

Donations

• Donation: Send to bitcoin

• Addres Bitcoin : 1NuNTXo7Aato7XguFkvwYnTAFV2immXmjS

• 

Credits

• Thanks to allah and Screetsec [ Edo -maland- ]
• First Contribute @nullrndtx
• Dracos Linux from Scratch Indonesia ( Awesome Penetration os ), you can see in http://dracos-linux.org/
• Offensive Security for the awesome OS ( http://www.offensive-security.com/ )
• http://www.kali.org/"
• And another open sources tool in github
• Uptodate new tools hacking visit http://www.kitploit.com
• Contribute Boy Suganda Sinaga [ dragz17 ]

Book for nmap

• Nmap 6: Network exploration and security auditing Cookbook
• Nmap Host Discovery Techniques
• Nmap Cheat Sheet (PDF) - 8ack
• Nmap - A Stealth Port Scanner - Villanova Computer Science
• Nmap Quick Reference Guide - SCADAhacker

Disclaimer

Note: modifications, changes, or alterations to this sourcecode is acceptable, however,any public releases utilizing this code must be approved by writen this tool ( Edo -m- ).

dracnmap's Issues

Multiple scan - improved support for multiple IP addresses

Release: testing
Type: feature
Status: to_closed

Improved support for multiple IP addresses. At this time multiple scanning is disabled.

printf: incorrect parse nmap command with '-' (separate argument)

Release: testing
Type: bug
Status: to_closed

Screetsec@dracnmap> nmap -sP 127.0.0.1

Full command:
> nmap -sP

127.0.0.1:
> 

Starting Nmap 7.60 ( https://nmap.org ) at 2018-01-17 14:58 CET
Nmap scan report for localhost (127.0.0.1)
Host is up.
Nmap done: 1 IP address (1 host up) scanned in 0.00 seconds

Result: pass

Shellcheck output:

In src/functions line 843:
    printf "\n\e[1;39m%s\e[m:\n> \e[0;30m%s\e[m\n" "Full command" "nmap ${_cmd[@]}"
                                                                        ^-- SC2145: Argument mixes string and array. Use * or separate argument.


In src/functions line 850:
    printf "\n\e[1;39m%s\e[m:\n>\e[0;30m%s\e[m\n> \e[0;30m%s\e[m\n" "Full command" "nmap ${_cmd[@]}" "$_output_path"
                                                                                         ^-- SC2145: Argument mixes string and array. Use * or separate argument.

xterm is blank

Owner please take a look at this error

Invalid MIT-MAGIC-COOKIE-1 keyWarning: This program is an suid-root program or is being run by the root user.
The full text of the error or warning message cannot be safely formatted
in this environment. You may get a more descriptive message by running the
program as a non-root user or by removing the suid bit on the executable.
xterm: Xt error: Can't open display: %s

How i can fix that error ?
virtual machine connected from vnc
Nethunter 64bit

Operating system:Android

$ uname -a
Linux localhost 4.9.227-perf-21965548 #1 SMP PREEMPT Thu Jul 22 10:23:48 +07 2021 aarch64 GNU/Linux
$ uname -r

4.9.227-perf-21965548

can not Dracnmap run in command line?

grep -nr graphical *
Dracnmap-Dracos.sh:37: echo -e "\e[1;31mThe script should be executed inside a X (graphical) session."$transparent""
Dracnmap.sh:36: echo -e "\e[1;31mThe script should be executed inside a X (graphical) session."$transparent""

Validation of the entered data

Release: testing
Type: bug

Add of a mechanism checking the entered data from the CLI (for set command).

Example:

Screetsec@dracnmap> set session ipaddr
What is your IP Target or Host: i_am_to_the_correct_hostname
Screetsec@dracnmap> show session ipaddr
{"IP address":
  {"ipaddr":"i_am_to_the_correct_hostname"}
}

Mac OS support

I feel like adding mac support should be easy, not sure if it would work out of the box if we install xterm on mac but a simple change like the following would make it work:

-    xterm -hold -fa monaco -fs 13 -bg black -e nmap  $ip
+    bash -m -v -c "nmap $ip"

Checking the Nmap commands

Release: testing
Type: bug

Checking if all work correctly.

Example:

• webservice module: 1 menu entry

Failed to resolve "firewall-bypass.targetport=22".

Using xdg-open instead of firefox command for opening xml and html files

The bash code of dracnmap-v2.2.sh and dracnmap-dracOS-v2.2.sh seem to use firefox just for opening xml files.

I suggest to edit those .sh files in order to use a more generic XML viewer for preventing users using browsers different by firefox (i.e., brave, chromium, firefox-esr) to be forced to install Firefox resulting a bloatware.

So, just use xdg-open command instead of firefox in the .sh files.

Dracnmap.sh: 120: Dracnmap.sh: Syntax error: "(" unexpected

I've just cloned from GIT, chmod +x Dracnmap.sh, runed it as root and get this error :

-e \e[0;36m
.-._______________.-.
___ .' .-----. |======+----------------+
/./ ( | /| | OOO |
/ ' _ / | BOOOMM !!!!!! |
| .( \ |_______|
.' @-.///
.' |===
/ /
/ |
| '
| \
-../

-e \e[1;32m-- -- +=[(c) 2016-2017 | dracos-linux.org | Linuxsec.org | Pentester Indonesia
-e \e[0;36m-- -- +=[ Author: Screetsec < Edo Maland > ]=+ -- --
-e
[!]::[Check Dependencies]:
[✔]::[Check User]: root
[✔]::[Internet Connection]: connected!
[✔]::[ Nmap ]: installation found!
Dracnmap.sh: 120: Dracnmap.sh: Syntax error: "(" unexpected

XTERM Warning : Tried connect to session manager

bisa di atasi dengan env -u SESSION_MANAGER xterm..., Mau ngerubah codenya tapi banyak banget

have encoding issues

I'am Using Mac OS

Cant open Display

Hi !

It would be nice if you can run the Tool withoud needing a XSession. If you run the programm via ssh terminal you get the following error:

Warning: This program is an suid-root program or is being run by the root user.
The full text of the error or warning message cannot be safely formatted
in this environment. You may get a more descriptive message by running the
program as a non-root user or by removing the suid bit on the executable.
xterm: Xt error: Can't open display: %s
xterm: DISPLAY is not set

Sure this is what you get if you dont have an xsession. Maybe you could do a check if the programm has xterm access. Otherwise you dont open new windows.

Thanks for the good work!

Error Code

./Dracnmap: 115: ./Dracnmap: Syntax error: "(" unexpected

Operating System:

• BackBox 4.6
• Bash Version 4.3-7ubuntu1.5

Nmap doesnt work when host doesn respond to ping

Following output is received when scanning a host that doesnt respond to ping.

Starting Nmap 7.01 ( https://nmap.org ) at 2016-10-14 15:16 CEST
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 4.11 seconds

Proposed solution: Add -Pn as default flag, or as optional flag.

Dracnmap is Not working !!

Hi, there

OS - Kali

Any Idea why I'm getting this error??

Screetsec@dracmap-v2: 3

What is your IP Target or Host: xxx.xxx.x.xx
Do you want exit? ( Yes / No ) :./dracnmap-v2.2-dracOs.sh: line 3065: urxvt: command not found

./dracnmap-v2.2-dracOs.sh: line 3121: [: !=: unary operator expected
./dracnmap-v2.2-dracOs.sh: line 3125: [: !=: unary operator expected

Appreciate you'r input

typo

Dracnmap.sh line 135 (https://github.com/Screetsec/Dracnmap/blob/master/Dracnmap.sh#L135) tertulis Nmap, seharusnya xterm.
Terima kasih.

fake user-agent scan

Add this line in to your nmap commands (or chose a diferent user-agent string)..

--script-args http.useragent="Mozilla/5.0 (iPhone; CPU iPhone OS 11_2_5 like Mac OS X) AppleWebKit/604.5.6 (KHTML, like Gecko) Version/11.0 Mobile/15D60 Safari/604.1" <hosts>

Store Nmap commands in json file

Release: testing
Type: feature

Storing all available Nmap commands from the CLI level in the json file (or anything else that is easily parsed using bash). Addition of the loading mechanism to relevant entries for a specific menu.

Pass the nmap process to a separate terminal

Release: testing
Type: feature

Pass the nmap process to a separate terminal (option to restore from v2.2).

TOR support

Release: testing
Type: feature
Status: to_closed

Pass all Nmap traffic through onion network.

Save session keys

Release: testing
Type: feature

Save session keys to config file.

At this time:

• show session keys/options:

show session <key>

• set session keys/options:

set session <key>

Static analysis - find and fix shellcheck issues

Release: testing
Type: maintenance
Status: to_closed

Static analysis - find and fix shellcheck issues.

Resolved for:

• dracnmap
• src/functions
• src/modules/auth
• src/modules/brd
• src/modules/brutense
• src/modules/exploit
• src/modules/fuzzer
• src/modules/malware
• src/modules/nse
• src/modules/pingbebeb
• src/modules/vuln
• src/modules/webservice
• src/modules/zenmapscript

Creating mass scans

Release: testing
Type: feature
Status: open

Adding a mass scanning mechanism using a set of similar scenarios. For example:

[21] mysql-dump-hashes
[22] mysql-empty-password
[23] mysql-query
[24] mysql-users

Creating on this basis one scan performing all available options for each type.