Releases: bamhm182/SynackAPI
Fixed issue with missions.build_summary() if mission dates had no milliseconds
- Sometimes the claimedOn property of a mission is written as
%Y-%m-%dT%H:%M:%SZ
instead of%Y-%m-%dT%H:%M:%S.%fZ
. An exception used to occur if this happened. This is now fixed.
Targets get_scope() will now pull from connected target
targets.get_scope()
will now pull the scope of the connected target if no arguments provided- Alphabetized defs for better organization
Added Alerts and Scratchspace
- Added the functionality to send messages via Slack and Email
- Added some config variables which enable a "Scratchspace". When
scratchspace_dir
is set to~/Scratchspace
anduse_scratchspace
isTrue
, running commands liketargets.get_scope(codename='BODACIOUSBABOON')
will create files like~/Scratchspace/BODACIOUSBABOON/{host,burp}.txt
depending on the type of target it is. - Added helper functions to support the above functionality or to be called independently.
Added some helper functions & other minor improvements
- Added functionality to facilitate adding scopes to the database
- Added functionality to check Mission Wallet status
- Added functionality to connect/disconnect from targets
- Improved handling of information pertaining to h.targets.get_connected()
Created Urls Table and Functions
The url and screenshot_url function has been moved from the Ports table into its own Urls table since you can have many Urls per IP:Port.
Also added functions to manage the Urls table.
Added Ability to Retrieve Scopes
Several functions have been added to the targets plugin to enable retrieval of Host and Web Application scopes and present Web Application Scopes in a few different ways.
Added Hydra Functionality
- Added ability to query Hydra
- Added new tables to the database to facilitate the new ability to pull Hydra information into the database. Can also be supplemented with wrappers you could write to ingest enumerated services from tools like nmap, masscan, etc.
- New functions added to Database to search for ports and neatly return them
Added 'SynackAPI Log In' button to the Login Page
When you have taken the required steps to have the SynackAPI script automatically log you in, you will now see a 'SynackAPI Log In' button added to the Login page. Clicking this button will instantly log you in so you don't have to wait for the 60 second safety timer to elapse.
Fixed several issues from the refactor
There were still a couple lingering issues from the refactor. They should be resolved in this version.
Fixed issue with overriding Target attributes while adding to db
I didn't make it obvious why I had added kwargs to the db.add_targets() function. It was so that I can do things like having is_registered be True without having to re-poll the Targets Synack API endpoint.