Quick marking tool——Aopo tool

---

Preface

      An automated and rapid intranet management tool with functions such as asset detection, vulnerability scanning, service scanning, and weak password blasting. Created by Xunyun Security Team.

---

1. Project address

     1）https://github.com/ExpLangcn/Aopo。

2. Solve problems

     1) Linux error: /lib/ld-musl-x86_64.so.1: bad ELF interpreter: There is no such file or directory.

curl https://forensics.cert.org/cert-forensics-tools-release-el7.rpm -o cert-forensics-tools-release-el7.rpm 
rpm -Uvh cert-forensics-tools-release*rpm
yum --enablerepo=forensics install -y musl-libc-static

3. Current functions

• ICMP Concurrent Probe Survival IP
• Only perform gateway detection on segment A
• Integrated Xray POC scanning
• Parsing Xray POC V1 template
• Concurrent detection of host port services
• Concurrent detection of weak passwords in host services
• The service weak password detection module supports SSH
• The service weak password detection module supports Mysql
• The service weak password detection module supports Mssql
• The service weak password detection module supports Mongodb
• The service weak password detection module supports Oracle
• The service weak password detection module supports FTP
• The service weak password detection module supports SMB
• The service weak password detection module supports Redis unauthorized
• The custom Password dictionary is automatically merged into the program's built-in

4. Usage tutorial

     1) Scan all assets on the intranet (default detection: 10 Section A | 172 Section A | 192 Section B)

	./Aopo -all

     2) Specify network segment scanning (supported formats: 192.168.1.1｜192.168.1.1/24｜192.168.1.1/16｜192.168.1.1/8｜192.168.1.1,192.168.1.2)

	./Aopo -ip 192.168.1.1/24

     3) Read the target from the file (read the target from the file, the supported format is as above. Note: one per line)

	./Aopo -ipf target.txt

     4) Customized password dictionary (read the target from the file, automatically remove duplicates and merge it into the program's built-in dictionary)

	./Aopo -addpass password.txt -ip xxx...