Google Chromeis needed by the screenshot and crawler commands.
go install github.com/hophouse/gop@latestGOP provides a toolbox to do pentest tasks.
Usage:
gop [command]
Available Commands:
[WIP]tee Act as the unix tee command but also display the executed command.
completion Generate the autocompletion script for the specified shell
crawler Crawler command to crawl recursively or not a domain or a website.
generate Generate module.
help Help about any command
host Resolve hostname to get the IP address.
irc IRC module to chat.
kill-switch
pomodoro
proxy Set up a proxy to use
scan Scan commands to scan any kind of assets.
schedule Schedule a command to be executed at a precise time. If an option is not defined, the value of the current date will be taken.
screenshot Take screenshots of the supplied URLs. The program will take the stdin if no input file is passed as argument.
server
shell Set up a shell either reverse or bind.
static-crawler The static crawler command will visit the supplied Website found link, script and style sheet inside it.
station Use it as a station to manage and retrieve simple reverse shell in plain TCP.
tunnel .
visit Visit supplied URLs.
web
Flags:
-h, --help help for gop
--logfile string Set a custom log file. (default "logs.txt")
--no-log Do not create a log file.
--output-directory string Use the following directory to output results.
Use "gop [command] --help" for more information about a command.
If the proxy option is set, please use set the following option "Suppress Burp error messages in browser". If it is not done, all the response will have the status code 200 OK. The option can be enabled in Proxy -> Options -> Miscellaneous.
Generate a private key.
openssl genrsa -out ca.key 4096Generate the CA.
openssl req -new -x509 -sha256 -key ca.key -out ca.crt -days 3650This command will serve file through a HTTP Web server. A few authentication methods can be added with the option --auth. The HTTP Basic and NTLM authentication are included.
package main
import (
"fmt"
"net/http"
"github.com/gorilla/mux"
"github.com/hophouse/gop/gopServer"
"github.com/hophouse/gop/utils/logger"
"github.com/urfave/negroni"
)
type NewServer struct {
Server gopserver.Server
}
func (s NewServer) GetCertSubject() string {
return s.Server.GetCertSubject()
}
func (s NewServer) GetServer(r *mux.Router, n *negroni.Negroni) (http.Server, error) {
addr := fmt.Sprintf("%s:%s", s.Server.Host, s.Server.Port)
logger.Printf("[+] HTTP server : %s:https://%s\n", s.Server.Scheme, addr)
n.UseHandler(r)
server := http.Server{
Addr: addr,
Handler: n,
}
return server, nil
}
func (s NewServer) CreateRouter() *mux.Router {
r := mux.NewRouter()
r.HandleFunc("/test", func(w http.ResponseWriter, r *http.Request) {
})
r.PathPrefix("/").HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
})
return r
}
func (s NewServer) CreateMiddleware() *negroni.Negroni {
return s.Server.CreateMiddleware()
}
func main() {
s := NewServer{
Server: gopserver.Server{
Host: "127.0.0.1",
Port: "8000",
Vhost: "",
Auth: "",
Realm: "",
},
}
// HTTP
s.Server.Scheme = "http"
gopserver.RunServerHTTPCmd(s)
// HTTPS
s.Server.Scheme = "https"
gopserver.RunServerHTTPSCmd(s)
}