{ "info": { "author": "cr0hn", "author_email": "cr0hn@cr0hn.com", "bugtrack_url": null, "classifiers": [ "Environment :: Console", "Intended Audience :: Other Audience", "Intended Audience :: System Administrators", "License :: OSI Approved :: BSD License", "Operating System :: MacOS", "Operating System :: Microsoft :: Windows", "Operating System :: POSIX", "Programming Language :: Python :: 3.5", "Topic :: Security" ], "description": "idsFree\n=======\n\n*IdsFree: Launch hacking tests in cloud providers securely, isolated and without raise security alerts in the provider*\n\n.. image:: https://github.com/bbva/idsfree/raw/master/doc/source/_static/idsfree-logo-256.png\n :height: 64px\n :width: 64px\n :alt: idsFree logo\n\n.. image:: https://travis-ci.org/BBVA/idsfree.svg?branch=master\n :target: https://travis-ci.org/bbva/idsfree\n\n.. image:: https://img.shields.io/pypi/l/Django.svg\n :target: https://github.com/bbva/idsfree/blob/master/LICENSE\n\n.. image:: https://img.shields.io/pypi/status/Django.svg\n :target: https://pypi.python.org/pypi/idsfree/1.0.0\n\n.. image:: https://codecov.io/gh/bbva/idsfree/branch/master/graph/badge.svg\n :target: https://codecov.io/gh/bbva/idsfree\n\n.. image:: https://readthedocs.org/projects/idsfree/badge/?version=latest\n :target: http://idsfree.readthedocs.io/en/latest/?badge=latest\n :alt: Documentation Status\n\n+----------------+--------------------------------------------+\n|Project site | https://github.com/bbva/idsfree |\n+----------------+--------------------------------------------+\n|Issues | https://github.com/bbva/idsfree/issues/ |\n+----------------+--------------------------------------------+\n|Documentation | https://idsfree.readthedocs.io/ |\n+----------------+--------------------------------------------+\n|Authors | Daniel Garcia (cr0hn) |\n+----------------+--------------------------------------------+\n|Latest Version | 1.0.0-alpha |\n+----------------+--------------------------------------------+\n|Python versions | 3.5 or above |\n+----------------+--------------------------------------------+\n\nWhat's idsFree?\n===============\n\n**IdsFree** allow you to perform hacking testing without raise alerts at IDS mechanism.\n\nWhat problem solve IdsFree?\n===========================\n\nThere're many organizations and companies (an users too) that only have Cloud provides as an infrastructure for their own products, developments and any other thing that they will need.\n\nBut, **what happen with active part of security**? Of course we're talking about ethical hacking and penetration testing. The major part of cloud providers doesn't allow to perform hacking tasks in their platform (or very limited), **even if you only attack your own services**!\n\n**IdsFree** allow you to do:\n\n1. **Hacking** tasks **without raise alert into Cloud Provider**.\n2. Create a **secure and isolated network** to perform your hacking tests.\n3. **Automate** your **hacking tasks** following the concept of previous point.\n\nHow it works?\n=============\n\nTo perform the above tasks, **IdsFree** follow these steps:\n\n1. IdsFree uses a SSH connection a virtual machine in your cloud provider.\n2. Once connected, idsFree will **create a private and cyphered network** on this virtual machine using *Docker Swarm*.\n3. Get **your application** (and their environment requisites) **as a Docker image** and run it attaching it to the previously created network.\n4. **Attach** to the network **hacking tools** as docker containers and launch selected attacks through the cyphered and isolated network.\n5. Take the **results** of tools and export them in a usable format: **JSON** or **JUnit** format (very useful for integrating with **Jenkins**).\n6. **Clean up** the container and network from the virtual machine.\n\nThe next image illustrates how the environment are deployed in the cloud provider:\n\n.. image:: https://github.com/bbva/idsfree/raw/master/doc/source/_static/diagrams/hacking-with-idsfree.png\n :width: 400px\n :alt: IdsFree running\n\nQuick start\n===========\n\nInstall\n-------\n\n.. code-block:: bash\n\n > python3.5 -m pip install idsfree\n\nCheck remote environment\n------------------------\n\nIdsFree allow to check if a remote system has all the necessary conditions\nto run. An examples of usage are:\n\n**Check remote system by passing the password in command line**\n\n.. code-block:: bash\n\n > idsfree -v -H 192.168.111.129 -d -U root -P MY_PASSWORD prepare\n [ * ] Starting preparation of remote host...\n [ * ] Checking remote machine for minimum requisites\n [ * ] Initialization Swarm at IP: 192.168.111.129\n [ * ] Creating new encrypted network: DgJXoXmeYhASHjmSV\n\n**Check remote system and tell to idsFree ask for the password**\n\n.. code-block:: bash\n\n > idsfree -v -H 192.168.111.129 -d -U root -A prepare\n [ * ] Starting preparation of remote host...\n [ * ] Checking remote machine for minimum requisites\n [ * ] Initialization Swarm at IP: 192.168.111.129\n [ * ] Creating new encrypted network: DgJXoXmeYhASHjmSV\n\nLaunching the attacks\n---------------------\n\nCurrently, idsFree can launch two type of attacks: net | web, and try to choice the best tools to perform the attacks.\n\nAlso, idsFree can report in two formats: **JSON** and **JUnit**.\n\n**Launch attack and report in JUnit**\n\n.. code-block:: bash\n\n > idsfree -v -H 192.168.111.129 -d -U root -P MY_PASSWORD run_attacks -p 6379 -t net -s redis redis -o results.xml -e junit\n [ * ] Starting attacks of remote host...\n [ * ] Checking remote machine for minimum requisites\n [ * ] Creating temporal encrypted network: lEvXBfPNVmoCZyFmKJsnPSADJjrUoxmxjFst\n [ * ] Removing temporal encrypted network: lEvXBfPNVmoCZyFmKJsnPSADJjrUoxmxjFst\n [ * ] Generating results as 'JUnit' format, in file: 'results.xml'\n\n**Launch attack, report in JSON and ask for password**\n\n.. code-block:: bash\n\n > idsfree -v -H 192.168.111.129 -d -U root -A run_attacks -p 6379 -t net -s redis redis -o results.json -e json\n [ * ] Starting attacks of remote host...\n [ * ] Checking remote machine for minimum requisites\n [ * ] Creating temporal encrypted network: lEvXBfPNVmoCZyFmKJsnPSADJjrUoxmxjFst\n [ * ] Removing temporal encrypted network: lEvXBfPNVmoCZyFmKJsnPSADJjrUoxmxjFst\n [ * ] Generating results as 'json' format, in file: 'results.json'\n\nDocumentation\n=============\n\n(Still pending!)\n\nGo to documentation site: https://idsfree.readthedocs.io/\n\nContributors\n------------\n\nContributors are welcome. You can find a list ot TODO tasks in the `TODO.md `_ at the project file.\n\nAll contributors will be added to the `CONTRIBUTORS.md `_ file.\n\nThanks in advance if you're planning to contribute to the project! :)\n\nLicense\n=======\n\nThis project is distributed under `BSD license `_\n\n", "description_content_type": null, "docs_url": null, "download_url": "", "downloads": { "last_day": -1, "last_month": -1, "last_week": -1 }, "home_page": "https://github.com/bbva/idsfree", "keywords": "", "license": "BSD", "maintainer": "", "maintainer_email": "", "name": "idsfree", "package_url": "https://pypi.org/project/idsfree/", "platform": "", "project_url": "https://pypi.org/project/idsfree/", "project_urls": { "Homepage": "https://github.com/bbva/idsfree" }, "release_url": "https://pypi.org/project/idsfree/1.0.0/", "requires_dist": null, "requires_python": "", "summary": "IdsFree: Launch hacking tests in cloud providers securely, isolated and without raise security alerts in the provider", "version": "1.0.0" }, "last_serial": 2834856, "releases": { "1.0.0": [ { "comment_text": "", "digests": { "md5": "19195743ae92c5e2b3010a36b6279155", "sha256": "aaa13552b82a4dfe8c8b0c0ce2dd9a4c4b5c27d4fe1c18404b75d66218092637" }, "downloads": -1, "filename": "idsfree-1.0.0.tar.gz", "has_sig": false, "md5_digest": "19195743ae92c5e2b3010a36b6279155", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 20846, "upload_time": "2017-04-27T16:02:01", "url": "https://files.pythonhosted.org/packages/41/1d/0db453329650fafaefe0b0d4e4638f0b02f9e80ba5a6fefe9a344f5825bc/idsfree-1.0.0.tar.gz" } ] }, "urls": [ { "comment_text": "", "digests": { "md5": "19195743ae92c5e2b3010a36b6279155", "sha256": "aaa13552b82a4dfe8c8b0c0ce2dd9a4c4b5c27d4fe1c18404b75d66218092637" }, "downloads": -1, "filename": "idsfree-1.0.0.tar.gz", "has_sig": false, "md5_digest": "19195743ae92c5e2b3010a36b6279155", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 20846, "upload_time": "2017-04-27T16:02:01", "url": "https://files.pythonhosted.org/packages/41/1d/0db453329650fafaefe0b0d4e4638f0b02f9e80ba5a6fefe9a344f5825bc/idsfree-1.0.0.tar.gz" } ] }