capNcook - GitLite

KO | EN

gitlite — search

#javascript #python #ai #golang #go #android #machine-learning #nodejs #awesome #cli #awesome-list #pytorch #security #open-source

capNcook

(★ 124)

capNcook - a dark web exploration tool

파일 탐색기

최종 버전 다운로드 (.zip)

- - back.css
  - main.css
  - onion_check.css
  - onion_check_form.css
  - test.css
- - Proto Mono Regular.ttf
- - default_ss.png
  - tor_logo.ico
  - tor_logo.png
  - trilogy_logo.png
- - main.js
- enumeration.html
- enumeration_form.html
- headers.html
- headers_form.html
- index.html
- onion_check.html
- onion_check_form.html
- recon.html
- recon_form.html
.env
.gitignore
app.py
dockerfile
license
poc.py
proxychains4.conf
README.md
requirements.txt
torbulkexitlist
torrc
wordlist.txt

# 설치 가이드

1. 코드 내려받기

git clone https://github.com/hoodietramp/capNcook

깃허브에서 프로젝트 코드 전체를 내 컴퓨터로 내려받습니다.

cd capNcook

방금 내려받은 프로젝트 폴더 안으로 이동합니다.

2. Docker

쉬움 추천

사전 준비물

Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
Docker Desktop 컨테이너를 빌드하고 실행하려면 필요합니다. 설치 후 실행해서 백그라운드에 켜두세요.

docker build -t capncook .

Dockerfile을 기반으로 실행 가능한 이미지를 빌드합니다.

docker run -p 8080:80 capncook

빌드된 이미지를 실제 컨테이너로 실행합니다.

✅ 터미널에 docker compose ps 를 입력해 컨테이너들이 Up 상태인지 확인하세요. README에 포트 번호가 적혀있다면 브라우저에서 http://localhost:포트번호 로 접속해보세요.

3. Python

쉬움

사전 준비물

Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
Python 3 설치 시 'Add Python to PATH' 옵션을 꼭 체크하세요 (Windows).

pip install -r requirements.txt

requirements.txt 등에 명시된 파이썬 라이브러리를 설치합니다.

python app.py

파이썬 스크립트(또는 모듈)를 실행합니다.

✅ 에러 메시지 없이 실행되고 터미널에 안내 문구가 출력되면 정상입니다.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<p align="center">
➡️
<a href="https://github.com/hoodietramp/wiki">Documentation</a> |
        <a href="https://github.com/hoodietramp/capNcook/wiki/Installation">Installation Guide</a>  
 ⬅️
</p>

<p align="center">
    <img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="capNcook">

<hr>

# 🤔 What is this?

capNcook is a Python Flask-based web application designed for dark web exploration.

![capNcook](https://raw.githubusercontent.com/hoodietramp/capNcook/master/static/images/pictures_for_readme/main.png)

> "What about anonymity?"

That's the point. You don't need to worry about it now, our tool utilizes tor for anonymity and privacy, identifies entry and exit nodes while esthablishing a tor circuit, 
rebuild the tor circuit each time you run the tool and flush old circuits.

The tool employs efficient multi-threading in Python to enhance performance 🚀

Live implementation of different tools and techniques to explore and do basic recon on hidden services over TOR

## 📊 capNcook : First of its kind

| **Name**                                   | ⚡ capNcook ⚡ |
| ------------------------------------------ | -------------|
| Unifies results from multi Dark-Web Search Engines | ✅           |
| Identify Entry/Exit Nodes In Tor Circuit   | ✅           |
| Multiple functionalities                   | ✅           |
| Supports Multithreading                    | ✅           |
| Easy to set up                             | ✅           |
| Can run as tor hidden service              | ✅           |
| Created for hackers by hackers             | ✅           |

# ✨ Features

- **Search Over Tor:** Utilize different search engines on the dark web to find relevant onion domains.

- **Anonymity and Privacy:** Identify entry and exit nodes to ensure anonymity and privacy when interacting with onion domains. The tool includes circuit rebuilding to maintain security.

- **TOR Whois Information:** Retrieve WHOIS information for onion domains.

- **Screenshots:** Capture screenshots and grab response headers of .onion sites.

- **Subdirectories:** Identify and list subdirectories of onion web-servers.

## Requirements

- Python 3 [`sudo apt install python3`]
- Python3-pip [`sudo apt install python3-pip`]
- Flask
- Stem
- Requests
- BeautifulSoup
- Termcolor
- Dotenv
- gowitness (for screenshot functionality)
- FeroxBuster (for enumeration functionality)
- Tor [`sudo apt install tor`]
- WhoIS [`sudo apt install whois`]
- Proxychains [`sudo apt install proxychains4`]
- Jq - process json data
- Chromium [`sudo apt install chromium`]

# 🎬 Getting Started

If you're having trouble with setting up capNcook, [read this.](https://github.com/hoodietramp/capNcook/wiki/Common-Issues-&-Their-Solutions)

## ‼️ Important Links (Docs, Installation guide)

| Installation Guide                                                          | Documentation                                             |
| --------------------------------------------------------------------------- | --------------------------------------------------------- |
| 📖 [Installation Guide](https://github.com/hoodietramp/capNcook/wiki/Installation) | 📚 [Documentation](https://github.com/hoodietramp/capNcook/wiki) |

## 🏃‍♀️Running capNcook

You can run capNcook -

1. Run with flask `flask run`
2. Normal way with python3 `python3 app.py`

![Gif showing capNcook running](https://raw.githubusercontent.com/hoodietramp/capNcook/master/static/images/pictures_for_readme/running.gif)

# 🔭 Usage Guidelines

| Name | ⚡ What does it do? ⚡|
|--------------------|------------------------------------------------------------------------------------------|
|🔍 **Search Page** | Enter keyword, Select search engine, index onion domains.|
|🧅 **Onion Check** | Click on `Run Onion Check` button to check the status of onion domains, including response codes, titles, and descriptions.|
|🕵️ **Recon** | Click on `Run Recon` button to perform WHOIS lookups on onion domains.|
|🗡 **Headers** | Click on `Run Headers` button to capture response headers and screenshots of onion domains.|
|🪐 **Enumeration** | Click on `Run Dir Fuzz` button to run FeroxBuster against onion domains to find sub-directories/files.|

# Screenshots

- This is the main interface of tool, select your preferred search engine and you can search using keywords like you'd do over any normal search engine and it'll list domains related to the keyword.

![main](https://raw.githubusercontent.com/hoodietramp/capNcook/master/static/images/pictures_for_readme/main.png)

- In `onion_check`, it'll grab the site's title and description, its status code, and based on the status code it'll filter it as active / inactive.

![onion_check](https://raw.githubusercontent.com/hoodietramp/capNcook/master/static/images/pictures_for_readme/onion_check.png)

- In recon, it's doing recon using `torwhois` database to pull info regarding each listed onion domain if available.

![recon](https://raw.githubusercontent.com/hoodietramp/capNcook/master/static/images/pictures_for_readme/recon.png)

- In headers, it's taking screenshots and grabbing server response headers, often reveals the technology or programming language used to build the web application via header like `X-Powered-By`, It may include information about the underlying frameworks or CMS (Content Management System) being used. The `Server` header typically indicates the software and version running on the server.

![headers](https://raw.githubusercontent.com/hoodietramp/capNcook/master/static/images/pictures_for_readme/headers.png)

- In enumeration, it's doing basic directory fuzzing for each onion domain using the wordlist.txt

![enumeration](https://raw.githubusercontent.com/hoodietramp/capNcook/master/static/images/pictures_for_readme/enumeration.png)

## ⚗️ Contributions and Issues

Don't be afraid to contribute! We have many, many things you can do to help out.

Contributions are welcome, but ensure they align with ethical use. If you encounter issues, please report them at the [capNcook Issues](https://github.com/hoodietramp/capNcook/issues).

## Disclaimer

This tool is provided for educational purposes only. The developers are not responsible for any misuse or illegal activities conducted with this tool. Use it responsibly and ethically 🙏