ares - Phishing toolkit for red teams and pentesters.

项目说明

Ares ![Gitter]() ![Go Report Card]() ![Docker pulls]() ![Build Status]()

Phishing toolkit for red teams and pentesters. Ares allows security testers to create a landing page easily, embedded within the original site. Ares acts as a proxy between the phised and original site, and allows (realtime) modifications and injects. All references to the original site are being rewritten to the new site. Users will use the site like they'll normally do, but every step will be recorded of influenced. Ares will work perfect with dns poisoning as well.

Getting started

Docker

Make sure the config toml is at the right location and valid.

Now you can na to If you want all results to be written to Elasticsearch, don't forget to setup the Elasticsearch cluster.

Installation from Source

If you do not have a working Golang (1.7) en setup please follow Golang Installation Guide.

Features

* realtime 1 to 1 of original site
* modify specific paths to return static (rendered as Go template) files
* create redirects (short urls)
* inject scripts into target site
* support ssl (using lets encrypt)
* multiple targets / hosts
* enhanced filtering on path, method, ip addresses and useragent
* all requests and responses are being logged into Elasticsearch
* all data is being stored for caching / retrieval

Todo

* create small frontend for configuration, monitoring and dashboard
* send emails from toolkit

Injects

The injects can be inserted in the target site, currently we have the following injects:

* location will ask the client for longitude and latitude and post to server
* snap will generate screenshots and post to server
* clipboard will copy text from clipboard and post to server

Configuration

See config.toml.sample for a sample configuration file.

Gophish

Ares will work seamless with Gophish, where you'll use Ares for the landing page functionality.

Contribute

Contributions are welcome.

Setup your Ares Github Repository

Fork Ares upstream source repository to your own personal repository. Copy the URL for ares from your personal github repo (you will need it for the git clone command below).

De Guidelines

* If you ha dependencies for Ares, Ares manages its dependencies using go
- Run go get foo/bar
- Edit your code to import foo/bar
- Run make pkg-add PKG=foo/bar from top-le

* If you ha for Ares which needs to be removed
- Edit your code to not import foo/bar
- Run make pkg-remove PKG=foo/bar from top-le

* When you're ready to create a pull request, be sure to:
- Have test cases for the new code. If you ha about how to do it, please ask in your pull request.
- Run make
- Squash your commits into a single commit. git rebase -i. It's okay to force update your pull request.
- Make sure go test -race ./... and go build completes.

* Read Effective Go article from Golang project
- Ares` project is fully conformant with Golang style
- if you happen to obser code, please feel free to send a pull request

Creators

Remco (DutchSec)

Copyright and license

Code and documentation copyright 2017 Remco .

Code released under the Apache license.

Disclaimer

Here should come an appropriate disclaimer, no warranties and Ares shouldn't be used for malicious intent.

项目信息

开发语言：Go

Star 数：129

技术要点

该项目属于红蓝攻防方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Phishing toolkit for red teams and pentesters.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。