Skip to content
This repository has been archived by the owner on Dec 14, 2021. It is now read-only.

Commit

Permalink
Updated to Bheem v3
Browse files Browse the repository at this point in the history
Updated Bheem to Bheem v3 to support scope based RECON and other powerful features.
  • Loading branch information
harsh-bothra committed Sep 18, 2020
1 parent 8a35a70 commit b2cbffb
Show file tree
Hide file tree
Showing 21 changed files with 436 additions and 121 deletions.
2 changes: 2 additions & 0 deletions .gitattributes
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
# Auto detect text files and perform LF normalization
* text=auto
62 changes: 47 additions & 15 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,32 +1,53 @@
# Project Bheem

Project Bheem is a simple collection of small bash-scripts which runs iteratively to carry out day-to-day recon process and store output in an organized way. However, this tool was never meant to be public as there is nothing fancy about it but due to request by community, I have decided to make it public.
Please feel free to improve it in any way you can. There is no secret sauce involved and it's just a set of commands and existing tools written in bash-scripts for my own personal automation.
Project Bheem is a simple collection of small bash-scripts which runs iteratively to carry out various tools and recon process & store output in an organized way. This project was created initially for automation of Recon for personal usage and was never meant to be public as there is nothing fancy about it but due to request by community, Project Bheem is now Public.
Please feel free to improve it in any way you can. There is no secret sauce involved and it's just a set of commands and existing tools written in bash-scripts for simple Recon Automation.

# Remember
Project Bheem Supports an approach of Recon from @harshbothra_'s Scope Based Recon Methodology. Currently this tools supports performing recon for:

1. Small Scope (single urls in scope) : Performs a limited recon & useful when only a few urls are provided in scope
2. Medium Scope (\*.target.com in scope) : Performs recon to enumerate more assets and give you more options to attack on.
3. Large Scope (Everything in Scope) : Performs almost every possible recon vector from subdomain enumeration to fuzzing.

A few features like port scanning might not be working in the current build and some of the newly released tools might also be missed. we are working on upgrading the tool but feel free to fork, upgrade and make a pull request (Ensure that tool is not breaking).


### A big thanks to "Kathan Patel" for restructuring Project Bheem to Support Scope Based Recon.

# Pre-Requisite

1. Make sure to have "Go" installed and paths are correctly set.

1. Please clone this repo into the "root" directory so that it "install.sh" can automatically move the relevant scripts.
2. Otherwise, manually transfer the "arsenal" folder to "root" directory.
# Installation

1. Clone the repository
2. Run the following script to install necessary tools: ``sh install.sh``
2. Run the following script to install necessary tools: ``bash install.sh``
3. The ``arsenal`` directory contains a set of small scripts used to automate Bheem.
4. Simply run following command to use Bheem:
4. Simply run following command to see all the supported options provided in Bheem:

``Bheem <target_file>``
``Bheem -h``

Example: ``Bheem target.txt``

5. To use it over vps for performing recon on larger set of targets perform following command:

``screen -S <screen_name>``
``Bheem <target_file>``
``Bheem -h``

6. This will keep ``Bheem`` running even if the SSH Connection is terminated or you turn off your local machine.

~ Make sure to replace your Chaos API key (Hardcoded key is not Valid), otherwise comment that part.

# Sample Usage

1. Small Scope Recon : ``Bheem -d test.com -S``
2. Medium Scope Recon : ``Bheem -u test.com -M``
3. Large Scope Recon : ``Bheem -t targetfile -L``


# Side Notes

1. If you don't want to use specific module, just comment it out and it won't be used anymore.

# Tools Used

1. Nuclei
Expand All @@ -41,19 +62,24 @@ Example: ``Bheem target.txt``
10. FavFreak
11. Waybackurls
12. Gau
13. Parallel
14. asnip
15. ffuf
16. gowitness
17. subjack
18. smuggler
19. git-hound

~ A lot of other onliners and tools to be added.

# Future Plans/Under Development

1. Adding Directory Enumeration
_1. Adding Directory Enumeration_
2. Adding Subdomain Bruteforcing
3. Adding HTTP Desync Scanner
_3. Adding HTTP Desync Scanner_
4. Adding Vulnerable Software & Exploit Suggester
5. Adding Oneline Scanner for CORS, CRLF & Other Vectors
6. Adding Visual Recon
7. Adding HTTP Header Security Analysis
8. Adding Other attack vectors along with development.
_6. Adding Visual Recon_

# Special Thanks

Expand All @@ -66,5 +92,11 @@ Every single application security community member and tool developers. Special
5. Imran (Heartbleed oneliner)
6. M4ll0k (Secret Finder)
7. lc (gau)
8. tillson (git-hound)
9. ffuf (ffuf)
10. sensepost (gowitness)
11. defparam (smuggler)
12. haccer (subjack)
13. crt.sh (YashGoti)

### Please feel free to contribute.
Loading

0 comments on commit b2cbffb

Please sign in to comment.