IVRE
Network Reconnaissance and Vulnerability Analysis Framework
Introduction
IVRE (Instrument de VEille Réseau) is an open-source framework for network reconnaissance, vulnerability assessment, and asset management. It automates network scanning, processes scan results, and provides a web-based interface for analyzing and visualizing network data.
Features
- Network Scanning: Integrates with tools like Nmap, Masscan, and ZMap for automated scanning.
- Centralized Database: Stores scan results in a MongoDB backend for efficient querying.
- Web Interface: Interactive dashboard for visualizing network topology and vulnerabilities.
- Vulnerability Detection: Cross-references scan data with CVE databases and exploit frameworks.
- Scalability: Handles large-scale network scans and distributed deployments.
Installation
- Install Dependencies:
sudo pacman -S mongodb nmap python-pip
- Install IVRE via pip:
pip install ivre
Configuration
- Set Up MongoDB:
Start the MongoDB service:sudo systemctl enable --now mongodb
- Initialize IVRE Database:
ivre db --init
- Configure IVRE:
Edit the configuration file at~/.ivre.conf
to customize scan ranges, ports, and credentials.
Install Verification
Check IVRE version:
ivre --version
Uninstall
pip uninstall ivre
Usage
Basic Commands
Start a Network Scan
ivre scan --output=XML --range=192.168.1.0/24
Import Nmap Results into IVRE
ivre scan2db -s nmap -r scan_results.xml
Query the Database
ivre ip 192.168.1.1
Launch the Web Interface
ivreweb
Access the dashboard at http://localhost:8000
.
Example Workflows
Scan a Subnet and Visualize Results
ivre runscans --output=XML --range=10.0.0.0/24
ivre scan2db -s nmap -r scan.xml
ivreweb
Check Open Ports on a Specific IP
ivre ip 192.168.1.100 | grep "open ports"
Generate a Network Report
ivre report --format=html --output=report.html
Official Documentation & More Info
Contributing
- Report issues or contribute code via GitHub.
- Follow the contribution guidelines.
Support
- Join the IVRE Discord for community support.
- Check the GitHub Issues for troubleshooting.
License
IVRE is released under the AGPLv3 License.