# Osmedeus Core Engine | A Workflow Engine for Offensive Security

**URL:** <https://onehack.st/t/osmedeus-core-engine-a-workflow-engine-for-offensive-security/282462>\
**Category:** Tools & Scripts\
**Tags:** hacking, freebies\
**Created:** [May 7, 2024, 9:23pm UTC](https://onehack.st/t/osmedeus-core-engine-a-workflow-engine-for-offensive-security/282462 "2024-05-07T21:23:22Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\
**Post date:** [May 7, 2024, 9:23pm UTC](https://onehack.st/t/osmedeus-core-engine-a-workflow-engine-for-offensive-security/282462/1 "2024-05-07T21:23:23Z")

</div>

# Osmedeus Core Engine

[![Osmedeus](https://raw.githubusercontent.com/osmedeus/assets/main/logo-transparent.png)](https://www.osmedeus.org/)  
**Osmedeus - A Workflow Engine for Offensive Security**

[![](https://camo.githubusercontent.com/083041de667b15920e857233d3a75d160b1b3bd204fe45c5e5316b9accd042c2/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f446f63756d656e746174696f6e2d3030373844343f7374796c653d666f722d7468652d6261646765266c6f676f3d476974426f6f6b266c6f676f436f6c6f723d333966663134266c6162656c436f6c6f723d626c61636b26636f6c6f723d626c61636b)](https://docs.osmedeus.org/) [![](https://camo.githubusercontent.com/a2aabca14c71d7ca0d28bac51d9d7eb38ee22086a5fb00c4fbc8a827073d21e5/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f53706f6e736f72732d3030373844343f7374796c653d666f722d7468652d6261646765266c6f676f3d4769744875622d53706f6e736f7273266c6f676f436f6c6f723d333966663134266c6162656c436f6c6f723d626c61636b26636f6c6f723d626c61636b)](https://docs.osmedeus.org/donation/) [![](https://camo.githubusercontent.com/edde8638550f11ffe2457adad68f4f4b18cdbf1ccd884c61f3f3aa8cf2cb5858/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f2534304f736d6564657573456e67696e652d3030373844343f7374796c653d666f722d7468652d6261646765266c6f676f3d54776974746572266c6f676f436f6c6f723d333966663134266c6162656c436f6c6f723d626c61636b26636f6c6f723d626c61636b)](https://twitter.com/OsmedeusEngine) [![](https://camo.githubusercontent.com/a91fdad7d0a2730c253a638a81f76abf8a69d1807191cf20978c5ec385076002/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f446973636f72642532305365727665722d3030373844343f7374796c653d666f722d7468652d6261646765266c6f676f3d446973636f7264266c6f676f436f6c6f723d333966663134266c6162656c436f6c6f723d626c61636b26636f6c6f723d626c61636b)](https://discord.gg/gy4SWhpaPU) [![](https://camo.githubusercontent.com/b47ba884726e8cb3e63dd5534743c41d7157f9a5754d43bb63c49d86b7285973/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f72656c656173652f6a33737369652f6f736d65646575733f7374796c653d666f722d7468652d6261646765266c6162656c436f6c6f723d626c61636b26636f6c6f723d326663343134266c6f676f3d476974687562)](https://github.com/j3ssie/osmedeus/releases)

* * *

## 🔥 What is Osmedeus?

Osmedeus is a Workflow Engine for Offensive Security. It was designed to build a foundation with the capability and flexibility that allows you to build your own reconnaissance system and run it on a large number of targets.

## 📖 Documentation & FAQ

You can check out the documentation at [**docs.osmedeus.org**](https://docs.osmedeus.org/) and the Frequently Asked Questions at [**here**](https://docs.osmedeus.org/faq) for more information.

## 📦 Installation

> NOTE that you need some essential tools like `curl, wget, git, zip` and login as **root** to start

bash \<(curl -fsSL [https://raw.githubusercontent.com/osmedeus/osmedeus-base/master/install.sh](https://raw.githubusercontent.com/osmedeus/osmedeus-base/master/install.sh))

### Build the engine from the source

Make sure you installed `golang >= v1.17`

go install -v [github.com/j3ssie/osmedeus@latest](http://github.com/j3ssie/osmedeus@latest)

Check out [**this page**](https://docs.osmedeus.org/installation/) for more the install on other platforms and [**docker image**](https://docs.osmedeus.org/installation/using-docker/).

## 🚀 Key Features of Osmedeus

- Significantly speed up your recon process
- Organize your scan results
- Efficiently to customize and optimize your recon process
- Seamlessly integrate with new public and private tools
- Easy to scale across large number of targets
- Easy to synchronize the results across many places

## 💡 Usage

```auto
# Example Scan Commands:
  ## Start a simple scan with default 'general' flow
  osmedeus scan -t sample.com

  ## Start a general scan but exclude some of the module
  osmedeus scan -t sample.com -x screenshot -x spider

  ## Start a scan directly with a module with inputs as a list of http domains like this https://sub.example.com
  osmedeus scan -m content-discovery -t http-file.txt

  ## Initiate the scan using a speed option other than the default setting
  osmedeus scan -f vuln --tactic gently -t sample.com
  osmedeus scan --threads-hold=10 -t sample.com
  osmedeus scan -B 5 -t sample.com

  ## Start a simple scan with other flow
  osmedeus scan -f vuln -t sample.com
  osmedeus scan -f extensive -t sample.com -t another.com
  osmedeus scan -f urls -t list-of-urls.txt

  ## Scan list of targets
  osmedeus scan -T list_of_targets.txt
  osmedeus scan -f vuln -T list-of-targets.txt

  ## Performing static vulnerability scan and secret scan on a git repo
  osmedeus scan -m repo-scan -t https://github.com/j3ssie/sample-repo
  osmedeus scan -m repo-scan -t /tmp/source-code-folder
  osmedeus scan -m repo-scan -T list-of-repo.txt

  ## Scan for CIDR with file contains CIDR with the format '1.2.3.4/24'
  osmedeus scan -f cidr -t list-of-ciders.txt
  osmedeus scan -f cidr -t '1.2.3.4/24' # this will auto convert the single input to the file and run

  ## Directly run on vuln scan and directory scan on list of domains
  osmedeus scan -f domains -t list-of-domains.txt
  osmedeus scan -f vuln-and-dirb -t list-of-domains.txt

  ## Use a custom wordlist
  osmedeus scan -t sample.com -p 'wordlists={{Data}}/wordlists/content/big.txt'

  ## Use a custom wordlist
  cat list_of_targets.txt | osmedeus scan -c 2

  ## Start a normal scan and backup entire workflow folder to the backup folder
  osmedeus scan --backup -f domains -t list-of-subdomains.txt

  ## Start the scan with chunk inputs to review the output way more much faster
  osmedeus scan --chunk --chunk-parts 20 -f cidr -t list-of-100-cidr.txt

  ## Continuously run the scan on a target right after it finished
  osmedeus utils cron --for --cmd 'osmedeus scan -t example.com'

  ## Backing up all workspaces
  ls ~/workspaces-osmedeus | osmedeus report compress

# Scan Usage:
  osmedeus scan -f [flowName] -t [target]
  osmedeus scan -m [modulePath] -T [targetsFile]
  osmedeus scan -f /path/to/flow.yaml -t [target]
  osmedeus scan -m /path/to/module.yaml -t [target] --params 'port=9200'
  osmedeus scan -m /path/to/module.yaml -t [target] -l /tmp/log.log
  osmedeus scan --tactic aggressive -m module -t [target]
  cat targets | osmedeus scan -f sample

# Practical Scan Usage:
  osmedeus scan -T list_of_targets.txt -W custom_workspaces
  osmedeus scan -t target.com -w workspace_name --debug
  osmedeus scan -f general -t sample.com
  osmedeus scan --tactic aggressive -f general -t sample.com
  osmedeus scan -f extensive -t sample.com -t another.com
  cat list_of_urls.txt | osmedeus scan -f urls
  osmedeus scan --threads-hold=15 -f cidr -t 1.2.3.4/24
  osmedeus scan -m ~/.osmedeus/core/workflow/test/dirbscan.yaml -t list_of_urls.txt
  osmedeus scan --wfFolder ~/custom-workflow/ -f your-custom-workflow -t list_of_urls.txt
  osmedeus scan --chunk --chunk-part 40 -c 2 -f cidr -t list-of-cidr.txt

💡 For full help message, please run: osmedeus --hh or osmedeus scan --hh
📖 Documentation can be found here: https://docs.osmedeus.org

```

Check out [**this page**](https://docs.osmedeus.org/installation/usage/) for full usage and the [**Practical Usage**](https://docs.osmedeus.org/installation/practical-usage/) to see how to use Osmedeus in a practical way.

## 💬 Community & Discussion

Join Our Discord server [here](https://discord.gg/mtQG2FQsYA)

## 💎 Donation & Sponsor

### [![Osmedeus](https://raw.githubusercontent.com/osmedeus/assets/main/premium-package.gif)](https://raw.githubusercontent.com/osmedeus/assets/main/premium-package.gif)

Check out for a couple of **[donation methods here](https://docs.osmedeus.org/donation/)** to get a **[premium package](https://docs.osmedeus.org/premium/)**

## License

`Osmedeus` is made with ❤ by [@j3ssiejjj](https://twitter.com/j3ssiejjj) and it is released under the MIT license.

## GitHub:

[https://github.com/j3ssie/osmedeus](https://github.com/j3ssie/osmedeus)