CmdID

CmdID / Commands

autorecon

A multi-threaded network reconnaissance tool which performs automated enumeration of services. tldr-pages

On Linux 2 Sigma rules name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Perform reconnaissance on target host(s) (detailed scan results will be dumped in results)

sudo autorecon host_or_ip1,host_or_ip2,...Identify

Trips 2 Sigma rules: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure]); lowLinux Network Service Scanning Tools Execution by Alejandro Ortuno, oscd.community, Georg Lauenstein (sure[secure])

Perform reconnaissance on target(s) from a file

sudo autorecon --target-file path/to/fileIdentify

Trips 2 Sigma rules: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure]); lowLinux Network Service Scanning Tools Execution by Alejandro Ortuno, oscd.community, Georg Lauenstein (sure[secure])

Output results to a different directory

sudo autorecon --output path/to/results host_or_ip1,host_or_ip2,...Identify

Trips 2 Sigma rules: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure]); lowLinux Network Service Scanning Tools Execution by Alejandro Ortuno, oscd.community, Georg Lauenstein (sure[secure])

Limit scanning to specific ports and protocols (T for TCP, U for UDP, B for both)

sudo autorecon --ports T:21-25,80,443,U:53,B:123 host_or_ip1,host_or_ip2,...Identify

Trips 2 Sigma rules: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure]); lowLinux Network Service Scanning Tools Execution by Alejandro Ortuno, oscd.community, Georg Lauenstein (sure[secure])

What detects it

Sigma process creation rules that name autorecon
highLinux HackTool ExecutionNasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])
lowLinux Network Service Scanning Tools ExecutionAlejandro Ortuno, oscd.community, Georg Lauenstein (sure[secure])