Exploit for IASS-ISP-ASN-Security-Scanner

## https://sploitus.com/exploit?id=77230F71-C9BC-5FED-A96A-B2D5586E75EB
💀 IASS — ISP ASN Security Scanner


  Automated reconnaissance & vulnerability assessment framework for ISP network infrastructure



  Resolve ASN → CIDR blocks → Port Discovery → Vulnerability Scanning → Camera Exploitation → Professional Reporting


---

## 🎯 What is IASS?

**IASS** (ISP ASN Security Scanner) is an advanced **cybersecurity IP scanner** and desktop reconnaissance platform built for automated network security assessments. Designed for security researchers and penetration testers, IASS automates the entire attack surface discovery pipeline against large-scale ISP infrastructure. Given an **Autonomous System Number (ASN)** or a **Single IP Address**, the scanner systematically resolves CIDR ranges, performs high-speed port discovery, executes targeted vulnerability scans, identifies exposed cameras, and generates professional security reports — all through a sleek, modern interface.

> ⚠️ **Legal Disclaimer**: This tool is designed for **authorized security testing and research only**. Unauthorized scanning of networks you do not own or have explicit permission to test is **illegal**. Always obtain written authorization before scanning any infrastructure. The developers assume no liability for misuse.

---

## 📸 Screenshots


🖥️ Main Interface





📜 Finding History




---

## ✨ Features

### 🔍 Reconnaissance Pipeline
- **ASN Resolution** — Resolves ASN to CIDR blocks via multiple fallback APIs (BGPView, RIPEstat, HackerTarget)
- **High-Speed Port Discovery** — Masscan-powered scanning at up to 1000 packets/sec across all 65,535 ports
- **Vulnerability Assessment** — Nuclei-based automated vulnerability detection with configurable severity filters
- **Camera Exploitation** — Identifies RTSP streams, web login panels, default credentials, and known CVEs for IP cameras (Hikvision, Dahua, Axis, etc.)
- **Single Target Mode** — Deep scan any individual IP with full port + vuln + camera analysis

### 🖥️ GUI & Visualization
- **Professional Modern UI** — Clean dark-mode interface with high-contrast elements built on CustomTkinter
- **Real-Time Console** — Live scan output with color-coded log levels
- **Interactive Network Topology** — Canvas-based network tree visualization with zoom/pan
- **World Map View** — GeoIP-based plotting of discovered targets on an interactive map
- **Progress Tracking** — Real-time progress bar with CIDR completion stats and elapsed time

### 📊 Reporting & Data
- **Professional PDF Reports** — A4-sized, multi-page HTML reports with cover page, executive summary, severity breakdown, and actionable recommendations (print to PDF)
- **Multiple Export Formats** — HTML, JSON, and TXT report generation
- **Finding History** — Searchable archive of all past scan findings with pagination
- **SQLite Persistence** — All scan state persisted for pause/resume across sessions

### ⚙️ Scan Control
- **Pause / Resume / Abort** — Full scan lifecycle control
- **Configurable Nuclei Options** — Severity filters, tags, rate limiting, concurrency, deep scan (OOB/OAST)
- **Auto-Template Updates** — Automatic Nuclei template updates before scans
- **Dependency Checker** — Built-in setup wizard if Masscan, Nuclei, or Npcap are missing

---

## 🚀 Quick Start

### Prerequisites

| Component | Purpose | Required |
|-----------|---------|----------|
| **Python 3.10+** | Runtime | ✅ Yes |
| **Npcap** | Raw packet driver for Masscan | ✅ Yes |
| **Masscan** | High-speed port scanner | ✅ Yes |
| **Nuclei** | Vulnerability scanner | ✅ Yes |
| **Git** | Clone repository | ✅ Yes |

### Step 1: Install System Dependencies

#### 📦 Npcap (Packet Capture Driver)

Masscan requires a raw packet capture driver to send SYN packets.

1. Download from [npcap.com](https://npcap.com/#download)
2. Run the installer
3. **Important**: Check ✅ **"Install Npcap in WinPcap API-compatible Mode"** during setup
4. Restart your computer after installation

#### 📦 Masscan (Port Scanner)

Option A — **Pre-bundled** (Recommended):
> The repository includes `masscan64.exe` in the `asn_scanner/` directory. No action needed.

Option B — Build from source:
```bash
git clone https://github.com/robertdavidgraham/masscan
cd masscan
# Build using Visual Studio or MinGW
```

#### 📦 Nuclei (Vulnerability Scanner)

Option A — **Go Install** (if Go is installed):
```bash
go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest
```

Option B — **Direct Download**:
1. Go to [Nuclei Releases](https://github.com/projectdiscovery/nuclei/releases)
2. Download `nuclei__windows_amd64.zip`
3. Extract `nuclei.exe`
4. Add the folder containing `nuclei.exe` to your system **PATH**:
   ```
   Settings → System → About → Advanced System Settings → Environment Variables
   → Path → Edit → New → C:\path\to\nuclei\folder
   ```

Option C — **Using Chocolatey**:
```powershell
choco install nuclei
```

#### Verify Installation

Open a new terminal and run:
```powershell
nuclei -version
# Expected: Nuclei Engine Version: vX.X.X
```

---

### Step 2: Clone & Setup

```bash
# Clone the repository
git clone https://github.com/IstiyakV/IASS-ISP-ASN-Security-Scanner.git
cd IASS-ISP-ASN-Security-Scanner

# Create virtual environment
python -m venv .venv

# Activate virtual environment
# Windows (PowerShell):
.\.venv\Scripts\Activate.ps1
# Windows (CMD):
.\.venv\Scripts\activate.bat

# Install Python dependencies
pip install -r requirements.txt
```

### Step 3: Run

```bash
python main.py
```

> 💡 **First Launch**: If any system dependency is missing, IASS will display an interactive setup guide with download links and instructions.

---

## 📖 Usage Guide

### ASN Reconnaissance Mode

1. Enter an **ASN** (e.g., `AS12345`) in the ASN Reconnaissance field
2. *(Optional)* Filter to a specific IP within the ASN range
3. Configure **Nuclei** settings (severity, tags, rate limit, concurrency)
4. Click **▶ ENGAGE** to start the full pipeline:

```
ASN Resolution → CIDR Enumeration → Masscan Port Scan → Nuclei Vuln Scan → Camera Exploit → Report
```

### Single Target Mode

1. Enter a **single IP address** in the Single Target Scan field
2. Click **⚡** to run a comprehensive deep scan:
   - Full 65,535 port scan
   - Vulnerability assessment
   - Camera exploitation checks

### Scan Controls

| Button | Action |
|--------|--------|
| **▶ ENGAGE** | Start ASN reconnaissance scan |
| **⏸ HOLD** | Pause scan (resume later) |
| **▶ RESUME** | Resume a paused scan |
| **🛑 ABORT** | Immediately terminate all scan processes |
| **⚡** | Quick single-IP deep scan |

### Exporting Reports

Click **💾 EXPORT REPORT** to generate reports in:
- **HTML** — Professional A4-paginated report (open in browser → `Ctrl+P` → Save as PDF)
- **JSON** — Machine-readable structured data
- **TXT** — Plain text summary

---

## 🏗️ Architecture

```
IASS/
├── main.py                    # Entry point
├── requirements.txt           # Python dependencies
├── README.md                  # This file
└── asn_scanner/
    ├── __init__.py
    ├── gui.py                 # Main GUI (CustomTkinter)
    ├── scanner.py             # Scan engine (threading, process management)
    ├── asn_resolver.py        # ASN → CIDR resolution (BGPView, RIPE, HackerTarget)
    ├── database.py            # SQLite persistence layer
    ├── camera_exploiter.py    # Camera detection & exploitation module
    ├── checker.py             # System dependency checker
    ├── geo_locator.py         # GeoIP lookup service
    ├── geo_widget.py          # Interactive world map widget
    ├── map_widget.py          # Network topology canvas
    ├── report_generator.py    # HTML/JSON/TXT report generation
    └── masscan64.exe          # Bundled Masscan binary (Windows x64)
```

### Pipeline Flow

```mermaid
graph LR
    A[ASN Input] --> B[ASN Resolver]
    B --> C[CIDR Blocks]
    C --> D[MasscanPort Scan]
    D --> E[NucleiVuln Scan]
    D --> F[CameraExploiter]
    E --> G[SQLite DB]
    F --> G
    G --> H[ReportGenerator]
    G --> I[GUIDashboard]
    I --> J[Network Map]
    I --> K[World Map]
```

---

## 🔧 Configuration

### Nuclei Settings (via GUI)

| Setting | Default | Description |
|---------|---------|-------------|
| **Severity** | Critical, High, Medium | Which vulnerability severities to scan for |
| **Tags** | `cve,default-logins` | Nuclei template tags to include |
| **Rate Limit** | 150 req/s | Maximum requests per second |
| **Concurrency** | 25 | Number of parallel template executions |
| **Auto-Update** | ✅ Enabled | Update Nuclei templates before each scan |
| **Deep Scan** | ❌ Disabled | Enable OOB/OAST interactsh-based detection |

---

## 🛡️ Supported Camera Brands

IASS includes built-in exploitation modules for:

| Brand | Detection | Default Creds | CVEs | RTSP |
|-------|-----------|---------------|------|------|
| Hikvision | ✅ | ✅ | ✅ | ✅ |
| Dahua | ✅ | ✅ | ✅ | ✅ |
| Axis | ✅ | ✅ | ✅ | ✅ |
| Foscam | ✅ | ✅ | — | ✅ |
| Amcrest | ✅ | ✅ | — | ✅ |
| Reolink | ✅ | ✅ | — | ✅ |
| TP-Link | ✅ | ✅ | — | — |
| Vivotek | ✅ | ✅ | — | ✅ |

---

## ⚠️ Troubleshooting


Masscan fails with "FAIL: Error opening adapter"

**Cause**: Npcap is not installed or not in WinPcap-compatible mode.

**Fix**:
1. Uninstall existing Npcap
2. Re-download from [npcap.com](https://npcap.com/#download)
3. During installation, check ✅ **"Install Npcap in WinPcap API-compatible Mode"**
4. Restart your computer



Nuclei command not found

**Cause**: Nuclei is not in your system PATH.

**Fix**:
```powershell
# Check if nuclei is accessible
nuclei -version

# If not found, add to PATH:
$env:PATH += ";C:\path\to\nuclei\folder"

# Or permanently via System Settings → Environment Variables → PATH
```



GUI appears blurry on high-DPI displays

**Fix**: Set DPI awareness before launching:
```powershell
# Add to the top of main.py:
import ctypes
ctypes.windll.shcore.SetProcessDpiAwareness(1)
```



Scan hangs at 0% progress

**Cause**: Masscan requires administrator privileges for raw packet transmission.

**Fix**: Run the terminal / IDE as **Administrator**:
```powershell
# Right-click PowerShell → "Run as Administrator"
cd path\to\IASS
python main.py
```


---

## 📄 License

This project is licensed under the **MIT License** — see the [LICENSE](LICENSE) file for details.

---

## 🤝 Contributing

Contributions are welcome! Please:

1. Fork the repository
2. Create a feature branch (`git checkout -b feature/amazing-feature`)
3. Commit your changes (`git commit -m 'Add amazing feature'`)
4. Push to the branch (`git push origin feature/amazing-feature`)
5. Open a Pull Request

---

## 📬 Contact

- **GitHub Issues** — For bug reports and feature requests
- **Pull Requests** — For code contributions

---

### 💖 Show Your Support

👀 **Watch** this repository for future updates and implementations!
🍴 **Fork** it to use as a blueprint for your own security automation projects!
⭐ **Star** this repo if you found it helpful and learned something new!

---


  💀 IASS v4.0 — Built for security researchers, by security researchers
  
  ⚡ Hack the planet responsibly ⚡