Module: System Service Enumeration (AV, etc)

[aconite33]

Add a module that will enumerate the running services on a host (E.g., EDR, AV, End Host Protection Suites)

Example Projects:

• https://github.com/SecureAuthCorp/impacket - Services.py
• https://github.com/Hackplayers/evil-winrm

[SpamFaux]

Waiting on #298 before development of this enhancement

[aconite33]

#298 has been merged

[aconite33]

Fixed in commit https://github.com/blacklanternsecurity/bbot-private/commit/13e18824463059de99d9b0c27fa1b9533bc9a9a6

[aconite33]

Bug with naabu scanning. Does not appropriately identify open ports.

Do we need to switch back to zmap?

[SpamFaux]

@aconite33 Is this worth bumping to high-priority?

[aconite33]

Yes, I would like to make this a priority before any other issues get worked.

[SpamFaux]

@TheTechromancer & @liquidsec FYI on the addition of the high-priority tag for this reopened issue.

[TheTechromancer]

Nmap module has been added in the async-testing branch:

b4c7850

[SpamFaux]

Last rounds of testing worked well with the nmap changes.

[SpamFaux]

Final piece is to review the CSV vs XLSX options.

[TheTechromancer]

Can you refresh my memory on this? I seem to recall there was a specific reason why we didn't like CSV as a format, but I can't remember exactly.

Personally if the CSV is working I would prefer we stick with it, since XLSX files are not easily readable/greppable from the CLI, and integrating them will require adding a pip dependency.