User:GoVanguard/sandbox

Legion, is a semi-automated network penetration testing tool that assists penetration testers in discovery, reconnaissance and exploitation of information systems. Legion is developed and maintained by GoVanguard.

Background
Originally based on Sparta, which is a python GUI application intended to assist network infrastructure penetration testing by providing scanning and enumeration tools. In January 2019 GoVanguard released a hard fork of Sparta named Legion. The codebase was refactored for stability and functionality and the application continues to integrate new features, scripts, API’s and other software. Legion is an open source application.

Current Legion Features

 * Automatic recon and scanning with NMAP, whataweb, Nikto, Vulners, Hydra, SMBenum, dirbuster, sslyzer, webslayer and more (with almost 100 auto-scheduled scripts)
 * Easy to use graphical interface with rich context menus and panels that allow pentesters to quickly find and exploit attack vectors on hosts
 * Modular functionality allows users to customize Legion and automatically call their own scripts/tools
 * Granular customization of stage scanning for IPS evasion
 * Automatic detection of CPEs and CVEs
 * Real-time auto-saving of project results and tasks

Changes from Sparta

 * Refactored from Python 2.7 to Python 3.7 and the elimination of depreciated and un-maintained libraries
 * Upgraded to PyQT5, increased responsiveness, less buggy, more intuitive GUI that includes features like:
 * Task completion estimates
 * 1-Click scan lists of IPs, host-names and CIDR sub-nets
 * Ability to purge results, re-scan hosts and delete hosts
 * Granular NMAP scanning options
 * Support for hostname resolution and scanning of vhosts/sni hosts
 * Revised process queuing and execution routines for increased app reliability and performance
 * Simplification of installation with dependency resolution and installation routines
 * Realtime project auto-saving, so in the event something goes wrong, progress is not lost
 * Docker container deployment option