Table of Contents
GSE Scripting Engine (--script)
The Ghosstless Scripting Engine (GSE) allows analysts to automate a range of network tasks: from advanced vulnerability detection and weak passwords audit to non-standard service discovery.
| Category | Purpose | Example of Use |
|---|---|---|
default |
Secure and quick scripts that run automatically with -sC o -A. |
ghosstless -sC target |
vuln |
Check if the target has known vulnerabilities (CVEs, Heartbleed, etc.). | ghosstless --script vuln target |
auth |
Audit authentication and credentials mechanisms at remote services. | ghosstless --script auth target |
discovery |
Check database records, web directories and LDAP directory services. | ghosstless --script discovery target |
safe |
Non-intrusive scripts designed to avoid saturation and tiup. | ghosstless --script safe target |
brute |
Raw force attacks controlled to audition password steamness. | ghosstless --script brute target |
# Pasar argumentos a los scripts GSE:
$ ghosstless --script http-title,http-headers --script-args http.useragent="Mozilla/5.0" target
# Inspeccionar la comunicación de los scripts en tiempo real:
$ ghosstless --script vuln --script-trace target