# RED\_HAWK | Best Information Gathering, Vulnerability Analysis & Crawling Tool | Kali Linux 🦅

**URL:** <https://onehack.st/t/red-hawk-best-information-gathering-vulnerability-analysis-crawling-tool-kali-linux/58214>\
**Category:** Tools & Scripts\
**Tags:** tools, programming, hacking, operating-system\
**Created:** [September 20, 2019, 1:10am UTC](https://onehack.st/t/red-hawk-best-information-gathering-vulnerability-analysis-crawling-tool-kali-linux/58214 "2019-09-20T01:10:17Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\
**Post date:** [September 20, 2019, 1:10am UTC](https://onehack.st/t/red-hawk-best-information-gathering-vulnerability-analysis-crawling-tool-kali-linux/58214/1 "2019-09-20T01:10:18Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/9/6/96179c4a1941bee22f51e98465882d508a3fcb3d.jpeg)

 ![image](https://onehack.st/uploads/default/original/3X/1/2/121cb534941e6565e52d825509e41d9f77e5b0e8.png)

> # [https://github.com/Tuhinshubhra/RED\_HAWK](https://github.com/Tuhinshubhra/RED_HAWK)

#### Version 2.0.0

#### By R3D#@0R\_2H1N A.K.A Tuhinshubhra

All in one tool for **Information Gathering** and **Vulnerability Scanning**

[![Alt text](https://camo.githubusercontent.com/4ddec853fe6c3cfa45403798fb5ccc6107436a7f/68747470733a2f2f7332382e706f7374696d672e6f72672f336c756e687a326b742f53637265656e73686f745f66726f6d5f323031372d30382d31315f31392d33302d33322e706e67 "Screenshot")](https://camo.githubusercontent.com/4ddec853fe6c3cfa45403798fb5ccc6107436a7f/68747470733a2f2f7332382e706f7374696d672e6f72672f336c756e687a326b742f53637265656e73686f745f66726f6d5f323031372d30382d31315f31392d33302d33322e706e67)

# Scans That You Can Perform Using RED HAWK :

- Basic Scan
  - Site Title **NEW**
  - IP Address
  - Web Server Detection `IMPROVED`
  - CMS Detection
  - Cloudflare Detection
  - robots.txt Scanner

- Whois Lookup `IMPROVED`
- Geo-IP Lookup
- Grab Banners `IMPROVED`
- DNS Lookup
- Subnet Calculator
- Nmap Port Scan
- Sub-Domain Scanner `IMPROVED`
  - Sub Domain
  - IP Address

- Reverse IP Lookup & CMS Detection `IMPROVED`
  - Hostname
  - IP Address
  - CMS

- Error Based SQLi Scanner
- Bloggers View **NEW**
  - HTTP Response Code
  - Site Title
  - Alexa Ranking
  - Domain Authority
  - Page Authority
  - Social Links Extractor
  - Link Grabber

- WordPress Scan **NEW**
  - Sensitive Files Crawling
  - Version Detection
  - Version Vulnerability Scanner

- Crawler
- MX Lookup **NEW**
- Scan For Everything - _The Old Lame Scanner_

# Installation:

1. Run The Tool and Type `fix` This will Install All Required Modules.
2. For The Bloggers View To Work Properly you have to configure RED HAWK with [moz.com](http://moz.com)’s api keys for that follow the following steps:

**How To Configure RED HAWK with [moz.com](http://moz.com) for Bloggers View Scan**

- Create an account in moz follow this link : [https://moz.com/community/join](https://moz.com/community/join)
- After successful account creation and completing the verification you need to generate the API Keys
- You can get your API Keys here: [https://moz.com/products/mozscape/access](https://moz.com/products/mozscape/access)
- Get your AccessID and SecretKey and replace the `$accessID` and `$secretKey` variable’s value in the `config.php` file
- All set, now you can enjoy the bloggers view.

# Usage:

- git clone `https://github.com/Tuhinshubhra/RED_HAWK`
- cd RED\_HAWK
- php rhawk.php
- Use the “help” command to see the command list or type in the domain name you want to scan (without Http:// OR Https://).
- Select whether The Site Runs On HTTPS or not.
- Select the type of scan you want to perform
- Leave the rest to the scanner

# List of CMS Supported

RED HAWK’s `CMS Detector` currently is able to detect the following CMSs (Content Management Systems) in case the website is using some other CMS, Detector will return _could not detect_ .

- WordPress
- Joomla
- Drupal
- Magento

# Known Issues

**ISSUE:** Scanner Stops Working After Cloudflare Detection!

**SOLUTION:** Use The `fix` Command OR Manually Install _php-curl_ & _php-xml_

Watch The Video TO See How To Solve This Isuue : [https://www.youtube.com/watch?v=QuFPY9NFTM8](https://www.youtube.com/watch?v=QuFPY9NFTM8)

# Video Demonstration

[![](https://img.youtube.com/vi/Jt9kBFiJDrE/maxresdefault.jpg "RED HAWK V.2 - INFORMATION GATHERING, VULNERABILITY ANALYSIS, WORDPRESS SCAN & CRAWLING") ](https://www.youtube.com/watch?v=Jt9kBFiJDrE)

# Suggestions And Feedbacks

Want to contribute to RED HAWK or point out something wrong? Just create a new issue here: [https://github.com/Tuhinshubhra/RED\_HAWK/issues/new](https://github.com/Tuhinshubhra/RED_HAWK/issues/new) I’d love to hear from you.

# TODOs

- Make a proper update option ( Installs current version automatically )
- Add more CMS to the detector
- Improve The WordPress Scanner ( Add User, Theme & Plugins Enumeration )
- Create a web version of the scanner
- Add XSS & LFI Scanner
- Improve the Links grabber thingy under bloggers view
- Add some other scans under the Bloggers View