Awesome

Cervantes is an opensource collaborative platform for pentesters or red teams who want to save time to manage their projects, clients, vulnerabilities and reports in one place.

Supported

Cervantes is an OWASP Foundation Project

Technologies

Try Cervantes

There is a live demo running on http://demo.cervantessec.org.

The demo server has 3 users to show the different permission levels. The credentials for these users are:

This demo has limited functionalities, file upload & report generation, logs... If you want to test the full functionalities use the dockerized version.

Features

• OpenSource
• Multiplatform
• Multilanguage
• Team Collaboration
• Checklists
• OWASP Compliance Reports
• BuiltIn dashboards and analytics
• Manage your clients and Offensive Security projects
• One click reports creation
• And more

Runtime requirements

• Docker
• Docker compose

How to run it locally with Docker compose

1. First you need to clone this repository

git clone https://github.com/CervantesSec/docker.git

2. After that you need to start your docker containers:

docker-compose -p cervantes -f docker-compose.yml up -d

3. After this, open your browser at http://localhost

4. Default User is:

admin@cervantes.local - Admin123.

How to run it locally from source

1. Install dotnet sdk from https://dotnet.microsoft.com/en-us/download

2. Install PostgreSQL https://www.postgresql.org/download/

3. Clone this repository

git clone https://github.com/CervantesSec/cervantes.git

4. In Cervantes.Web -> appsettings.json edit the DefaultConnection with your database parameters

{
  "ConnectionStrings": {
    "DefaultConnection": "Server=localhost;Database=cervantes;Username=postgres;Password=postgres"
  },
  "Logging": {
    "LogLevel": {
      "Default": "Trace",
      "Microsoft": "Warning",
      "Microsoft.Hosting.Lifetime": "Information",
      "Cervantes.*": "Trace"
    }
  },
  "AllowedHosts": "*",
  "EmailConfiguration": {
    "Enabled": false,
    "Name": "Cervantes",
    "From": "cervantes@cervantes.local",
    "SmtpServer": "localhost",
    "SmtpPort": 1025,
    "SmtpUsername": "cervantes@cervantes.local",
    "SmtpPassword": "cervantes"
  },
  "JiraConfiguration": {
    "Enabled": false,
    "Auth": "Basic",
    "Url": "",
    "Project": "",
    "User": "",
    "Password": "",
    "ConsumerKey": "",
    "ConsumerSecret": "",
    "OAuthAccessToken": "",
    "OAuthTokenSecret": ""
    
  }
}

6. Run the project

dotnet run --project /CERVANTES_PATH/Cervantes.Web/

7. After this, open your browser at http://localhost:5001

8. Default User is:

admin@cervantes.local - Admin123.

How to contribute

Here are some things you could do to become a contributor:

• ★ Star this project on Github ★
• Suggest new features or ideas
• Improve the code of the platform components
• Report security issues

Before you jump to make any changes make sure you have read the contributing guidelines. This would save us all time. Thanks!

Security

Please report Security issues via our disclosure policy.

How to report bugs

If you have bugs to report please use the issues tab on Github to submit the details.