legion
Legion is an open-source, customizable network penetration testing framework by GoVanguard, based on Sparta, aiding in discovery and exploitation of information systems.
Last updated
Was this helpful?
Legion is an open-source, customizable network penetration testing framework by GoVanguard, based on Sparta, aiding in discovery and exploitation of information systems.
Last updated
Was this helpful?
Legion, a fork of SECFORCE's Sparta, is an open source, easy-to-use, super-extensible, and semi-automated network penetration testing framework that aids in discovery, reconnaissance, and exploitation of information systems. is developed and maintained by . More information about Legion, including the , can be found on its project page at .
If you are interested in contributing to Legion, join our .
Install NMAP 7.93 using the following:
Then verify the version is 7.93 with: nmap -v
Update the apparmor profile: vi /var/lib/snapd/apparmor/profiles/snap.nmap.nmap
Goto line 300, create new line and add in:
Reboot
Automatic recon and scanning with NMAP, whataweb, nikto, Vulners, Hydra, SMBenum, dirbuster, sslyzer, webslayer and more (with almost 100 auto-scheduled scripts).
Easy to use graphical interface with rich context menus and panels that allow pentesters to quickly find and exploit attack vectors on hosts.
Modular functionality allows users to easily customize Legion and automatically call their own scripts/tools.
Multiple custom scan configurations ideal for testing different environments of various size and complexity.
Highly customizable stage scanning for ninja-like IPS evasion.
Automatic detection of CPEs (Common Platform Enumeration) and CVEs (Common Vulnerabilities and Exposures).
Ties CVEs to Exploits as detailed in Exploit-Database.
Realtime auto-saving of project results and tasks.
Refactored from Python 2.7 to Python 3.6 and the elimination of deprecated and unmaintained libraries.
Upgraded to PyQT5, increased responsiveness, less buggy, more intuitive GUI that includes features like:
Task completion estimates
1-Click scan lists of ips, hostnames and CIDR subnets
Ability to purge results, rescan hosts and delete hosts
Granular NMAP scanning options
Support for hostname resolution and scanning of vhosts/sni hosts.
Revise process queuing and execution routines for increased app reliability and performance.
Simplification of installation with dependency resolution and installation routines.
Realtime project auto-saving so in the event some goes wrong, you will not lose any progress!
Docker container deployment option.
Supported by a highly active development team.
RunIt script (docker/runIt.sh) supports:
Ubuntu 18
Fedora 30
ParrotOS
Kali Linux
It is possible to run the docker image on any Linux distribution, however, different distributions have different hoops to jump through to get a docker app to be able to connect to the X server. Everyone is welcome to try to figure those hoops out and create a PR for runIt.
We can only promise correct operation on Ubuntu 18 using the traditional installation at this time. While it should work on ParrotOS, Kali, and others, until we have Legion packaged and placed into the repos for each of these distros, it is musical chairs in regard to platform updates changing and breaking dependencies.
Two installation methods available:
It is preferable to use the Docker method over a traditional installation. This is because of all the dependency requirements and the complications that occur in environments which differ from a clean, non-default installation.
NOTE: Docker versions of Legion are unlikely to work when run as root or under a root X!
Docker method includes support for various environments, choose the one that works for you.
Linux with local X11
Assumes Docker and X11 are installed and set up (including running Docker commands as a non-root user).
It is critical to follow all the instructions for running as a non-root user. Skipping any of them will result in complications getting Docker to communicate with the X server.
Within Terminal:
Linux with remote X11
Assumes Docker and X11 are installed and set up.
Replace X.X.X.X with the IP address of the remote running X11.
Within Terminal:
Windows under WSL using Xming and Docker Desktop
Assumes:
Xming is installed in Windows.
Docker Desktop is installed in Windows
Docker Desktop is running in Linux containers mode
Docker Desktop is connected to WSL.
Replace X.X.X.X with the IP address with which Xming has registered itself. Right click Xming in system tray -> View log and see IP next to "XdmcpRegisterConnection: newAddress"
Within Terminal:
Windows using Xming and Docker Desktop without WSL
Why? Don't do this. :)
OSX using XQuartz
Configuring Docker
Setting up Docker on Linux
To install Docker components typically needed and add set up the environment for Docker, under a term, run:
Setup Docker to allow non-root users
To enable non-root users to run Docker commands, under a term, run:
Setup Hyper-V, Docker Desktop, Xming and WSL
The order is important for port reservation reasons. If you have WSL, HyperV, or Docker Desktop installed then please uninstall those features before proceeding.
Cortana / Search -> cmd -> Right click -> Run as Administrator
To reserve the Docker port, under CMD, run:
This will likely fail if you have Hyper-V already enabled or Docker Desktop installed
To install Hyper-V, under CMD, run:
Reboot
Cortana / Search -> cmd -> Right click -> Run as Administrator
To install WSL, under CMD, run:
Reboot
Run installer
Optionally input your Docker Hub login
Right click Docker Desktop in system tray -> Switch to Linux containers
If it says Switch to Windows containers then skip this step, it's already using Linux containers
Right click Docker Desktop in system tray -> Settings
General -> Expose on localhost without TLS
Run installer and select multi window mode
Open Microsoft Store
Install Kali, Ubuntu or one of the other WSL Linux Distributions
Open the distribution, let it bootstrap and fill in the user creation details
To install Docker components typically needed and add set up the environment for Docker redirection, under the WSL window, run:
Test Docker is reachable with:
Please use the Docker image where possible! It's becoming very difficult to support all the various platforms and their own quirks.
Assumes Ubuntu, Kali or Parrot Linux is being used with Python 3.6 installed.
Within Terminal:
To run all test cases, execute the following in root directory:
The configuration of selected ports and associated terminal actions can be easily modified by editing the legion.conf file.
[StagedNmapSettings] defines what ports will be scanned in sequential order as well as any NSE scripts that will be called.
[SchedulerSettings] defines what actions will occur automatically based upon port scan results.
The initial Sparta Python 2.7 codebase and application design is credited SECFORCE.
Several additional PortActions, PortTerminalActions and SchedulerSettings are credited to batmancrew.
The nmap XML output parsing engine was largely based on code by yunshu, modified by ketchup and modified SECFORCE.
ms08-067_check script used by smbenum.sh is credited to Bernardo Damele A.G.
Legion relies heavily on nmap, hydra, python, PyQt, SQLAlchemy and many other tools and technologies, so we would like to thank all of the people involved in the creation of those.
Special thanks to Dmitriy Dubson for his continued contributions to the project!
This package contains an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
Legion is a fork of SECFORCE’s Sparta.
Installed size: 3.12 MB
How to install: sudo apt install legion
legion
Updated on: 2022-Nov-16
See detailed instructions to set up Docker and enable running containers as non-root users and granting Docker group SSH rights .
See detailed Docker instructions
Not yet in runIt.sh script. Possible to set up using socat. See
Download from (Free account required)
Download
Legion is licensed under the GNU General Public License v3.0. Take a look at the for more information.
Refactored Python 3.6+ codebase, added feature set and ongoing development of Legion is credited to