π¦ ClawHub
MUKI Asset Fingerprinting
by @admin4giter
MUKI asset fingerprinting tool for red team reconnaissance. Use when performing authorized penetration testing, asset discovery, service fingerprinting, vuln...
TERMINAL
clawhub install muki-fingerprintπ About This Skill
name: muki-fingerprint description: MUKI asset fingerprinting tool for red team reconnaissance. Use when performing authorized penetration testing, asset discovery, service fingerprinting, vulnerability scanning, and attack surface mapping. Supports active/passive fingerprinting with 30,000+ signatures, sensitive path detection, and sensitive information extraction. Requires explicit authorization for target systems. metadata: openclaw: emoji: fingerprint category: security-assessment version: 1.0.0 author: OpenClaw requirements: - Linux amd64 environment - Network access to target - Explicit authorization for targets allowed-tools: ["Bash"]
MUKI Asset Fingerprinting Tool
MUKI is an active asset fingerprinting tool built for red team operations. It enables security researchers to rapidly pinpoint vulnerable systems from chaotic C-class segments and massive asset lists.
Prerequisites
Quick Start
# Scan single URL
muki -u https://target.comScan multiple URLs from file
muki -l targets.txtScan with proxy
muki -u https://target.com -p socks5://127.0.0.1:1080Disable specific modules
muki -u https://target.com -A -N # No active, no directory scan
Command Options
-h, --help Show help
-u, --url string Single URL to scan
-l, --list string File containing URLs (one per line)
-o, --output string Output file path
-p, --proxy string Proxy server (http:// or socks5://)
-t, --thread int Number of threads (default: 20, max: 100)
-A, --no-active Disable active fingerprint scanning
-N, --no-dir Disable directory scanning
-x, --no-passive Disable passive fingerprint scanning
Core Modules
1. Active Fingerprinting (-A to disable)
Sends protocol-specific probes to identify services with high confidence.2. Passive Fingerprinting (-x to disable)
Analyzes response artifacts without additional traffic.3. Sensitive Path Detection (-N to disable)
Checks for high-risk paths using curated dictionaries.4. Sensitive Information Extraction
Automatically extracts high-risk information from responses.Categories:
Output Formats
JSON Output
{
"target": "https://example.com",
"fingerprints": [
{
"service": "Apache",
"version": "2.4.41",
"confidence": "high"
}
],
"sensitive_paths": [
{
"path": "/admin",
"status": 200,
"risk": "high"
}
],
"sensitive_data": [
{
"type": "email",
"value": "admin@example.com",
"source": "response body"
}
]
}
Excel Output
Structured .xlsx report with multiple sheets:Workflow
Standard Reconnaissance
# 1. Prepare target list
cat > targets.txt << 'EOF'
https://target1.com
https://target2.com
192.168.1.0/24
EOF2. Run full scan
muki -l targets.txt -o results.json3. Review results
cat results.json | jq '.fingerprints[]'4. Generate Excel report
muki -l targets.txt -o report.xlsx
Stealth Scan (with proxy)
# Use Tor proxy for anonymity
muki -u https://target.com -p socks5://127.0.0.1:9050Or use HTTP proxy
muki -u https://target.com -p http://127.0.0.1:8080
Targeted Scan
# Fast scan - only passive fingerprinting
muki -u https://target.com -A -NDeep scan - all modules
muki -u https://target.com -t 50
Fingerprint Databases
finger.json (30,000+ fingerprints)
Passive fingerprint database covering:active_finger.json (300+ rules)
Active probing rules for:Rules.yml
Sensitive information extraction rules organized by groups:Best Practices
1. Authorization
2. Stealth
3. Data Handling
4. False Positive Reduction
Legal and Ethical Considerations
WARNING: This tool is for authorized security testing only.
Integration
With Other Tools
# Chain with nuclei for vulnerability scanning
cat muki_output.txt | nuclei -t cves/Import to Burp Suite
cat results.json | jq -r '.sensitive_paths[].path' > burp_scope.txtFeed to SQLMap for SQL injection testing
cat results.json | jq -r '.vulnerable_params[]' | sqlmap -m -
Troubleshooting
High Memory Usage
-t 10-xFalse Positives
Connection Issues
References
License
MIT License - See original repository for details.
π‘ Examples
# Scan single URL
muki -u https://target.comScan multiple URLs from file
muki -l targets.txtScan with proxy
muki -u https://target.com -p socks5://127.0.0.1:1080Disable specific modules
muki -u https://target.com -A -N # No active, no directory scan