# Eagle | Yet Another Vulnerability Scanner

**URL:** <https://onehack.st/t/eagle-yet-another-vulnerability-scanner/159421>\
**Category:** Tools & Scripts\
**Tags:** tools, hacking, documents\
**Created:** [October 19, 2020, 12:31pm UTC](https://onehack.st/t/eagle-yet-another-vulnerability-scanner/159421 "2020-10-19T12:31:47Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\
**Post date:** [October 19, 2020, 12:31pm UTC](https://onehack.st/t/eagle-yet-another-vulnerability-scanner/159421/1 "2020-10-19T12:31:47Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/5/2/520ea8e9ba826b3c0d47a31becf3e5b79285dbc6.png)

Project Eagle is a plugin based vulnerabilities scanner with threading support used for detection of low-hanging bugs on mass scale

```auto
                              .---. .----------- / __ / ------ / / ( )/ ----- ////// ' / ` --- Multipurpose vulnerability scanner //// / // : : --- v1.0b / / / /` '-- 2019-2020 //..\ ====UU====UU==== '//||\` ''`` Project Eagle

```

Developed and maintained: [@BitTheByte](https://twitter.com/BitTheByte) Idea: [@K4r1it0](https://twitter.com/K4r1it0)

**Requirements**

1. Python \>= 3.6
2. Install python libraries

```auto
$ python3 -m pip install -r requirements.txt

```

1. Works on Windows and Linux however windows is not the primary platform

**Usage**

**Ping**

This mode is only for checking online targets

```auto
$ python3 main.py -f domains.txt --ping

```

**Basic usage**

```auto
$ python3 main.py -f domains.txt

```

`domains.txt`: is a text file containing host names or ips, new line separated

**Advanced usage**

```auto
$ python3 main.py -f domains.txt -w 10 --db output.db.json

```

`domains.txt`: is a text file containing host names or ips, new line separated  
`output.db.json`: json formated output of the tool (will be used to restore state in future releases)  
`10`: is the number of working threads. keep in mind, workers are able to start workers for their work not limited by this number

**Debug (verbose) mode**

```auto
$ python3 main.py ...args -v*?

```

`v`: success, warning `vv`: success, warning, error `vvv`: all suppored messages

**Features**

1. CRLF
2. Senstive files e.g(`.git`, `info.php` ..)
3. Subdomain takeover
4. Anonymous FTP login
5. S3 buckets misconfiguration including automatic takeover and upload
6. HTTP Request Sumggling
7. Firebase database misconfiguration
8. Senstive information disclosure e.g(`API Keys`, `Secrets` ..) including JS files and HTML pages
9. Missing SPF Records
10. Path Traversal
11. PHP-CGI – CVE\_2012\_1823
12. Shell Shock – CVE\_2014\_6271
13. Struts RCE – CVE\_2018\_11776
14. WebLogic RCE – CVE\_2019\_2725
15. Confluence LFI – CVE\_2019\_3396
16. Ruby on Rails LFI – CVE\_2019\_5418
17. Atlassian SSRF – CVE\_2019\_8451
18. Apache Httpd mod\_rewrite – CVE\_2019\_10098

**TODO-Features**

- XSS Detection
- SSRF Attacks
- Platform Delection
- Platform Based attacks
- Automatic Login bruteforce
- Automatic directory bruteforce
- Parameter gathering and fuzzing
- Detecting Error messages
- Ability to select plugins
- Automatic updates
- Port Scanning and service detection

## GitHub:

> **[GitHub - BitTheByte/Eagle: Multithreaded Plugin based vulnerability scanner...](https://github.com/BitTheByte/Eagle)**
>
> Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

---

<div class="post-metadata">

**Author:** ![daominhsangvn](https://onehack.st/user_avatar/onehack.st/daominhsangvn/32/43495_2.png) [@daominhsangvn](https://onehack.st/u/daominhsangvn)\
**Post date:** [October 19, 2020, 1:00pm UTC](https://onehack.st/t/eagle-yet-another-vulnerability-scanner/159421/2 "2020-10-19T13:00:38Z")

</div>

I just tried but got nothing in return

 ![image](https://onehack.st/uploads/default/original/3X/2/0/200265503dd97fd6c1a2cd25a89b51c7f8822d70.png)