分布式扫描
Axiom is a dynamic infrastructure framework to efficiently work with multi-cloud environments, build and deploy repeatable infrastructure focussed on offensive and defensive security.
Axiom works by pre-installing your tools of choice onto a 'base image', and then using that image to deploy fresh instances. From there, you can connect and instantly gain access to many tools useful for both bug hunters and pentesters. With the power of immutable infrastructure, most of which is done for you, you can just spin up 15 boxes, perform a distributed nmap/ffuf/screenshotting scan, and then shut them down.
Because you can create many disposable instances very easily, axiom allows you to distribute scans of many different tools including amass aquatone arjun assetfinder dalfox dnsgen dnsx feroxbuster fff ffuf findomain gau gobuster gospider gowitness hakrawler httprobe httpx jaeles kiterunnter masscan massdns meg naabu nmap nuclei paramspider puredns rustscan s3scanner shuffledns & subfinder. Once installed and setup, you can distribute a scan of a large set of targets across 10-15 instances within minutes and get results extremely quickly. This is called axiom-scan.
Axiom supports several cloud providers, eventually, axiom should be completely cloud agnostic allowing unified control of a wide variety of different cloud environments with ease. Currently, DigitalOcean, IBM Cloud, Linode and Azure are officially supported providers. Google Compute is partially implemented and AWS is on the roadmap. If you would like prioritization of a feature or provider implementation, please contact me @pry0cc on Twitter and we can discuss :)
Resources
- Introduction
- Troubleshooting & FAQ
- Quickstart
- Demo
- Story
- Installation Instructions
- Scan Modules
- Contributors
$100 Free Credit
The original and best supported provider for Axiom is Digital Ocean! If you're signing up for a new Digital Ocean account, please use my link!
Linode $20 Free Credit
Our third provider for axiom! Please use this link for $20 free credit on Linode :)
Installation - Docker
docker exec -it $(docker run -d -it ubuntu) sh -c "apt update && apt install git -y && git clone https://github.com/pry0cc/axiom ~/.axiom/ && cd && .axiom/interact/axiom-configure"
Installation - Easy Install
You should use an OS that supports our easy install.
For Linux systems you will also need to install the newest versions of all packages beforehand sudo apt dist-upgrade
.
bash <(curl -s https://raw.githubusercontent.com/pry0cc/axiom/master/interact/axiom-configure)
If you have any problems with this installer, or if using an unsupported OS please refer to Installation.
Demo
In this demo (sped up out of respect for your time ;) ), we show how easy it is to initialize and ssh into a new instance.
Support
If you like Axiom and it saves you time, money or just brings you happy feelings, please show your support through sponsorship! Click the little sponsor button in the header and sponsor for as little as $1 per month :)
Or buy me a coffee to keep me powered :)
Sponsored By SecurityTrails! We are lucky enough to be sponsored by the awesome SecurityTrails! Sign up for your free account here!
Operating Systems Supported
OS | Supported | Easy Install | Tested |
---|---|---|---|
Ubuntu | Yes | Yes | Ubuntu 20.04 |
Kali | Yes | Yes | Kali 2020.4 |
Debian | Yes | Yes | Debian 10 |
Windows | Yes | Yes | WSL w/ Ubuntu |
MacOS | Yes | Yes | MacOS 11.4 |
Arch Linux | Yes | No | Yes |
Contributors
We've had some really fantastic additions to axiom, great feedback through issues, and perseverence through our heavy beta phase!
A list of all contributors can be found here, thank you all!
Logo
The logo was made by our amazing s0md3v! Thank you for making axiom look sleek as hell! Really beats my homegrown logo :)
Packages To Date
- amass
- anew
- anti-burl
- aquatone
- assetfinder
- dalfox
- dirb
- dnsprobe
- dnsvalidator
- docker
- fbrobe
- feroxbuster
- ffuf
- gau
- getjs
- gf
- gobuster
- Golang (setup, path configured, latest version)
- gowitness
- hakrawler
- httprobe
- jq
- kxss
- masscan
- massdns
- metasploit
- mosh
- nmap
- oh-my-zsh
- openvpn
- Paramspider
- projectdiscovery chaos
- projectdiscovery chaos-client
- projectdiscovery httpx
- projectdiscovery naabu
- projectdiscovery nuclei
- projectdiscovery shuffledns
- proxychains w/ Tor setup
- SecLists
- sn0int
- SQLMap
- subfinder
- subgen
- subjack
- tmux
- urlprobe
- waybackurls
- zdns
- zmap
And many more! Do you want to add a package to axiom? Read the wiki!