prismx - :: Prism X · Automated Enterprise Network Security

项目说明

<h1 align="left">Prism X · Open Source v1.5</h1>

<a href="README.md">English</a> • <a href="README_CN.md">中文</a>

---

Prism X integrates asset discovery, fingerprint recognition, weak password detection, and , adopting a modular YAML plugin strategy configuration to achieve a PoC mechanism highly similar to real attack chains.

Cross-platform and lightweight design: Supports multiple operating systems, making it easy to deploy and use.

Host and asset fingerprint recognition: Provides host survi and asset fingerprint recognition functions to fully grasp the status of network assets.

Weak password and detection: Capable of identifying weak passwords and scanning for to detect security risks in a timely manner and ensure system security.

Built-in JNDI external link service: Supports scanning of that require external connections, such as JNDI and RMI.

Port fingerprint recognition framework: yqcs/fingerscan

<h1 align="center">
<img src="images/scan.png" width="95%">
</h1>

Usage Command

Source Code Structure

<Tree> <ul> <li> core: System Core <ul> <li> ali: Host and port survi </li> <li> hydra: Weak password detection </li> <li> jsFind: Detection of sensiti in JS files </li> <li> owaspTop10: Tools for detecting XSS, SQL injection, etc. (Not completed yet, needs further optimization) </li> <li> plugins: Plugin registration center and plugin files </li> <li> subdomain: Subdomain scanning </li> <li> : detection module </li> <li> models: Dependencies for public modules </li> </ul> </li> <li> scan: Task scheduling center </li> <li> utils: Utility package <ul> <li>Task list</li> <li>Create new task</li> </ul> </li> <li> main.go: Program entry point </li> </ul> </Tree>

<h1 align="center">
<img src="images/img.png" width="95%">
</h1>

Build

Tips: It is recommended to use Golang 1.20 for compilation (newer of Go no longer support Windows 7 and earlier ).

---

Customized: Prismx.io

<h1 align="center">
<a href=" src=" width="90%"></a>

<a href=" src=" width="90%"></a>
</h1>

#### WeChat（left）| Follow（right）
<img src="images/wx.jpg" width="150"> <img src="images/wx_qrcode.jpg" width="150">

项目信息

开发语言：Go

Star 数：835

技术要点

该项目属于漏洞知识库方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕:: Prism X · Automated Enterprise Network Security Risk Detection and Vulnerability Scanning Tool / 棱镜 X · 自动化企业网络安全风险检测、漏洞扫描工具展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。