cybsuite 0.1.1

CybSuite

CybSuite

This project is currently in Alpha stage and under active development. While core functionality is implemented and tested, the API and features may change significantly between versions.

CybSuite is a collection of security tools and scripts for penetration testing, configuration review, and reconnaissance. The following tools are available:

• [cybs-db]: A centralized database for penetration testing, configuration review, and security assessments. Features built-in ingestors for common security tools (Nmap, Masscan, etc.), passive vulnerability scanning capabilities, reporting capabilities, and a planned web interface.
• [cybs-review]: A framework for configuration review that performs post-analysis of extracted configurations. Currently working for Windows systems, with Linux support coming soon.

Installation

PostgreSQL is required for CybSuite. You can easily set it up using Docker:

# Pull and run PostgreSQL container
sudo docker run --name postgres \
    -e POSTGRES_PASSWORD=postgres \
    -p 5432:5432 \
    -d postgres

The default PostgreSQL connection settings can be modified in ~/cybsuite/conf.toml:

Install CybSuite using pipx:

pipx install cybsuite

Cybs-db quick demo

Cybs-db can ingest various types of security scans, including Nmap and Masscan results:

# Ingest scan results
cybs-db ingest nmap scans/nmap/*.xml
cybs-db ingest masscan scans/masscan/*

# Request data in different formats
cybs-db request host --format json > hosts.json
cybs-db request service --format ipport --protocol tcp > ipport_tcp.txt
cybs-db request service --port 445 --format ip > smb.txt

# Report identified vulnerabilities
cybs-db report html

Cybs-review quick demo

Quick demonstration to review Windows hosts:

1. Generate the extraction script:

cybs-review script windows > windows.ps1

2. Run the script on your target Windows host (with root privileges for full extraction)

3. For demonstration, download sample extracts:

mkdir extracts && cd extracts
wget https://github.com/Nazime/CybSuite/releases/download/v0.1/extracts_WIN-ALPHA.zip
wget https://github.com/Nazime/CybSuite/releases/download/v0.1/extracts_WIN-BETA.zip

4. Run the review and open the report:

cybs-review review extracts_WIN-ALPHA.zip extracts_WIN-BETA.zip --open-report

Query the database from your previous review run:

cybs-db request windows_user --format json