Hades

A Proof-Of-Concept for a colaborative Pentest framework.

Hades is an web-based application designed to centralize all information gathered during security penetration testing. It employs Nodes to represent hosts, services and vulnerabilities, all interconnected by edges. The primary objective is to create a real-time collaborative platform akin to Miro, enabling Pentesters to initiate shared sessions and seamlessly store valuable data concerning the infrastructure, network, services, and vulnerabilities.

This repo contains a Proof-Of-Concept (PoC) to the backend Hades server.

Installation

Start the Neo4J with docker:

docker run -p 7474:7474 -p 7687:7687 neo4j:latest

Access the web interface and login with neo4j:neo4j. The server will ask for a new password.
Create a virtual environment:

mkdir Hades && cd Hades
python3 -m venv .

Clone this repository

git clone https://github.com/entr0pie/Hades src && cd src

Create a new .env file. Insert the password you provided earlier:

NEO4J_USERNAME=neo4j
NEO4J_PASSWORD=<YOUR-NEW-PASSWORD-HERE>
NEO4J_ADDRESS=localhost
NEO4J_BOLT_PORT=7687

Install the requirements:

pip install -r requirements.txt

su root
source ../bin/activate

Finally, start the server:

python3 hades.py

Demonstration

Scanning the Local Network

To scan the local network, just request the /netscan route:

curl http://localhost:8000/netscan

Result in Neo4J:

Scanning for open ports

To search for services on a machine, request the /portscan/tcp/syn route:

curl http://localhost:8000/portscan/tcp/syn/10.10.11.208