OwlArch

Software

🔙 Go back home

IVRE

Network Reconnaissance and Vulnerability Analysis Framework

Introduction

IVRE (Instrument de VEille Réseau) is an open-source framework for network reconnaissance, vulnerability assessment, and asset management. It automates network scanning, processes scan results, and provides a web-based interface for analyzing and visualizing network data.

Features

Installation

  1. Install Dependencies:
    sudo pacman -S mongodb nmap python-pip  
    
  2. Install IVRE via pip:
    pip install ivre  
    

Configuration

  1. Set Up MongoDB:
    Start the MongoDB service:
    sudo systemctl enable --now mongodb  
    
  2. Initialize IVRE Database:
    ivre db --init  
    
  3. Configure IVRE:
    Edit the configuration file at ~/.ivre.conf to customize scan ranges, ports, and credentials.

Install Verification

Check IVRE version:

ivre --version  

Uninstall

pip uninstall ivre  

Usage

Basic Commands

Start a Network Scan

ivre scan --output=XML --range=192.168.1.0/24  

Import Nmap Results into IVRE

ivre scan2db -s nmap -r scan_results.xml  

Query the Database

ivre ip 192.168.1.1  

Launch the Web Interface

ivreweb  

Access the dashboard at http://localhost:8000.

Example Workflows

Scan a Subnet and Visualize Results

ivre runscans --output=XML --range=10.0.0.0/24  
ivre scan2db -s nmap -r scan.xml  
ivreweb  

Check Open Ports on a Specific IP

ivre ip 192.168.1.100 | grep "open ports"  

Generate a Network Report

ivre report --format=html --output=report.html  

Official Documentation & More Info

Contributing

Support

License

IVRE is released under the AGPLv3 License.


🔙 Ghidra 🔜 Maltego