A fun and easy program written on BASH to automate and save time during vulnerability analysis and penetration testing. It automates various tools such as NMAP, Gobuster, theHarvester etc. It uses a custom designed Vulnerability Lookup which parses major databases like ExploitDB, National Vulnerability Database and VulDB (requires an API key). It saves all the outputs to separate files for easy use.
First we need to make requirements.sh executable before running. It will make sure you have all the tools/files available. Make sure you run this as root.
chmod +x requirements.sh
./requirements.sh
- Run the main script as
./BellasEye
- You may select a single option or you can automate multiple tasks by selecting multiple options, separated by a comma. All the duplicate processes will be skipped.
You can search for any vulnerability by passsing a query in the form of a product name with/without version, CVE id, CPE id or even CWE id. The program will parse three major databases:
- ExploitDb
- National Vulnerability Database
- VulDB (Requires API key)
- Got to vuldb.com and create an account.
- Go to profile and copy your api key
The creator of this code doesn't accept responsibility if it's used with malicious intent. This code is free to be used by anyone. This project should not be used to harm any individual or organisation.