Arp scan tome (#662)

Co-authored-by: Nicholas O'Brien <[email protected]>
spellshift · Feb 25, 2024 · 8287795 · 8287795
1 parent 1509522
commit 8287795
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/tavern/tomes/arp_scan/main.eldritch b/tavern/tomes/arp_scan/main.eldritch
@@ -0,0 +1,9 @@
+def arp_scan():
+    ip_res = sys.get_ip()
+    # Get the first IP on each interface ignoring any `127.0.0.` ips
+    all_ips = [ iface['ips'][0] for iface in ip_res if len(iface['ips']) > 0 and '127.0.0.' not in " ".join(iface['ips'])  ]
+    print(f"Scanning the following networks:\n{all_ips}\n")
+    res = pivot.arp_scan(all_ips)
+    print(res)
+
+arp_scan()
diff --git a/tavern/tomes/arp_scan/metadata.yml b/tavern/tomes/arp_scan/metadata.yml
@@ -0,0 +1,5 @@
+name: ARP Scan
+description: ARP Scan all networks that the host has access to
+author: hulto
+support_model: FIRST_PARTY
+tactic: RECON