¶ CryAI Wizard function.
¶ Description:
CryAI Wizard - a special feature designed to help users select the audits that are appropriate for their systems. The CryAI Wizard system analyzes technologies and services on the website, verifies against the database and offers audits for scanning that match the criteria and technologies found on the website.
¶ How it works
The audit selection process consists of 3 stages:
1. Collection of technologies and services used on the site.
2. Finds interesting information, analyzes it, filters and performs additional searches based on machine learning.
3. Selection of audits suitable for scanning the user's system.
Wizard offer:
Scan propose:
¶ Technologies and services gathering
At this stage, technologies and services are collected. Technologies are collected via the use of webanalyzer and wappalyzer services. And the collection of services is carried out using cli tools, e.g. nmap, netcat, curl and so on. Information about the technology includes its name and version, while information about the service includes the name of the product, port number, protocol name, cpe and banner.
¶ Tech and services gathering features:
- Do full portscan
- Subdomain enumeration
- Search for sensitive files and folders
- Passive data gathering ( OSINT)
- Deep recon
- Basic data about target
- Web Bruteforce
- Performance tests ( DDOS)
- Exploit check
- CMS tests
- SSL/TLS tests
- Network services Exploitation
- Network services bruteforce
- Custom modules ( free search on all modules)
Gathered technologies and services:
¶ Audits Selection
After the user confirms the selected technologies, the System selects audits for scanning and offers them to the user
Groups of audits offered by Wizard:
