cervantes - Cervantes is an open-source, collaborative platfor

项目说明

!Cer logo
<!-- ALL-CONTRIBUTORS-BADGE:START - Do not remove or modify this section -->
<!-- ALL-CONTRIBUTORS-BADGE:END -->

![GITHUB]()
![TWITTER]()
![WEB]()
![DISCORD]()
![DOCS]()

Cer is an open-source, collaborati designed specifically for pentesters and red teams. It serves as a comprehensi tool, streamlining the organization of projects, clients, , and reports in a single, centralized location.

By facilitating efficient data management and pro a unified workspace, Cer aims to significantly reduce the time and effort required in the coordination and execution of penetration testing acti.

Supported

Cer is an OWASP Foundation Project

<img src=" width="500" height="150">

Technologies

!DOTNET
!CSHARP
!RIDER
!JS
!HTML
!CSS

Features

* OpenSource
* Multiplatform
* Multilanguage
* Team Collaboration
* Checklists
* OWASP Compliance Reports
* Built-in dashboards and analytics
* Manage your clients and Offensi projects
* One click reports creation
* And more

Runtime requirements

Docker

Docker compose

How to run it locally with Docker compose

* First you need to clone this repository

* After that you need to start your docker containers:

* After this, open your browser at or and you will see the Cer login page.

Default User and Password

When you first launch the Cer application, a default user is created for you. The default username is .

The password for this user is generated randomly during the creation of the application container and the first launch of the application. This means that the password is unique for each instance of the application and provides an additional layer of security.

<img src=" width="800" height="500">

Please note that it's important to change the default password as soon as possible to ensure the security of your application. You can do this by logging in with the default user and na to the user settings page.

Remember, the security of your application is paramount. Always use strong, unique passwords and change them regularly.

How to run it locally from source

Requirements

.NET 8

PostgresSQL

Atlassian Jira Server (Optional only if you want to use Jira Integration)

#### How to run it locally

To install the Cer application from the source code, you can follow these steps:

* Clone the Repository: First, you need to clone the repository from GitHub. You can do this by running the following command in your terminal:

* Na to the Project Directory: Once the repository is cloned, na to the project directory:

* Edit appsettings.json: To use the application you need to edit the appsettings.json file inside the Cer.Web folder.

Database Connection String
The database connection string is used to connect your application to your database. It usually includes the server name, database name, and authentication details. Here's an example of how it might look in your appsettings.json:

Replace mySer, myDataBase, myUsername, and myPassword with your actual database details.

* Install Dependencies: The project uses .NET 8.0, so you need to have it installed on your machine. If you don't have it, you can download it from the official .NET website. Once .NET is installed, you can install the project dependencies by running:

* Build the Project: After the dependencies are installed, you can build the project:

* Run the Project: Finally, you can run the project:

The application should now be running at .

Please note that this is a basic installation guide and the actual process might vary depending on the project's specific configuration and requirements. For example, if the project uses a database, you might need to set up the database and update the connection string in the configuration file.

How to contribute

Here are some things you could do to become a contributor:

★ Star this project on GitHub ★

Suggest new features or ideas

Improve the code of the platform components

Report security issues

Before you jump to make any changes make sure you have read the contributing guidelines. This would save us all time. Thanks!

![paypal]()

Security

Please report Security issues via our disclosure policy.

How to report bugs

If you have bugs to report please use the issues tab on GitHub to submit the details.

Thanks to

<!-- ALL-CONTRIBUTORS-LIST:START - Do not remove or modify this section -->
<!-- prettier-ignore-start -->
<!-- markdownlint-disable -->
<table>
<tbody>
<tr>
<td align="center" ="top" width="14.28%"><a href=" src=" width="100px;" alt="Ruben Mesquida"/><br />_{<b>Ruben Mesquida</b>}</a><br /><a href="#business-mesquidar" title="Business de">💼</a> <a href=" title="Code">💻</a> <a href=" title="Documentation">📖</a> <a href="#translation-mesquidar" title="Translation">🌍</a></td>
<td align="center" ="top" width="14.28%"><a href=" src=" width="100px;" alt="abutcher"/><br />_{<b>abutcher</b>}</a><br /><a href=" title="Code">💻</a></td>
<td align="center" ="top" width="14.28%"><a href=" src=" width="100px;" alt="samet g."/><br />_{<b>samet g.</b>}</a><br /><a href="#translation-samogod" title="Translation">🌍</a> <a href=" title="Code">💻</a></td>
<td align="center" ="top" width="14.28%"><a href=" src=" width="100px;" alt="EmiliaCho"/><br />_{<b>EmiliaCho</b>}</a><br /><a href=" title="Bug reports">🐛</a></td>
<td align="center" ="top" width="14.28%"><a href=" src=" width="100px;" alt="jstangle"/><br />_{<b>jstangle</b>}</a><br /><a href=" title="Bug reports">🐛</a></td>
<td align="center" ="top" width="14.28%"><a href=" src=" width="100px;" alt="Th34t0m1c"/><br />_{<b>Th34t0m1c</b>}</a><br /><a href="#translation-Th34t0m1c" title="Translation">🌍</a></td>
<td align="center" ="top" width="14.28%"><a href=" src=" width="100px;" alt="Ander Gómez"/><br />_{<b>Ander Gómez</b>}</a><br /><a href=" title="Documentation">📖</a></td>
</tr>
<tr>
<td align="center" ="top" width="14.28%"><a href=" src=" width="100px;" alt="jpostolk"/><br />_{<b>jpostolk</b>}</a><br /><a href=" title="Bug reports">🐛</a></td>
<td align="center" ="top" width="14.28%"><a href=" src=" width="100px;" alt="sergioframi"/><br />_{<b>sergioframi</b>}</a><br /><a href=" title="Documentation">📖</a></td>
<td align="center" ="top" width="14.28%"><a href=" src=" width="100px;" alt="archnexus707"/><br />_{<b>archnexus707</b>}</a><br /><a href=" title="Documentation">📖</a></td>
<td align="center" ="top" width="14.28%"><a href=" src=" width="100px;" alt="sergioframi"/><br />_{<b>Manuel Martínez Casasola
</b>}</a><br /><a href=" title="Bug reports">🐛</a></td>
</tr>
</tbody>
</table>

<!-- markdownlint-restore -->
<!-- prettier-ignore-end -->

<!-- ALL-CONTRIBUTORS-LIST:END -->
<!-- prettier-ignore-start -->
<!-- markdownlint-disable -->

<!-- markdownlint-restore -->
<!-- prettier-ignore-end -->

<!-- ALL-CONTRIBUTORS-LIST:END -->

License

This project is licensed under the GNU Affero General Public License (AGPL-3.0), except for specific components that remain licensed under the Apache License 2.0.

![AGPL]()
![Apache]()

Summary:

AGPL-3.0 applies to the majority of the project.

Apache License 2.0 applies to the components listed in the NOTICE file.

For more details, see the full LICENSE and NOTICE files included in this repository.

Copyright Notice

Copyright (C) 2025 Ruben Mesquida Gomila

OWASP Cer and all contributions are protected under their respecti. For more information on license terms, visit:

项目信息

开发语言：C#

Star 数：449

技术要点

该项目属于红蓝攻防方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Cervantes is an open-source, collaborative platform designed specifically for pentesters and red teams. It serves as a comprehensive management tool, streamlining the organization of projects, clients, vulnerabilities, and reports in a single, centralized location.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。