Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
Go to file
Sam Stepanyan 625b507aef
Merge pull request #788 from OWASP/securestep9-patch-v0.3.3-1
Update version.txt
2024-01-20 22:08:16 +00:00
.data Fix typo 2022-04-12 17:33:02 -04:00
.github Bump github/codeql-action from 2 to 3 2023-12-13 22:53:33 +00:00
api Correct module name 2023-07-09 12:12:22 -04:00
core Fix a typo in sort dictionary method name 2023-10-10 13:28:09 -07:00
database Disconnect Handling to SQL 2023-07-15 08:38:12 -04:00
lib Update wp_plugin_small.txt 2024-01-19 01:22:01 +00:00
modules Update ivanti_epmm_lastpatcheddate.yaml 2024-01-20 21:24:40 +00:00
tests/core Fix a typo in sort dictionary method name 2023-10-10 13:28:09 -07:00
web removed commented debug 2022-09-25 11:41:30 -04:00
.gitattributes Create .gitattributes 2023-07-03 10:25:07 +01:00
.gitignore Update .gitignore: exclude VSCode workspace files 2023-10-10 13:36:13 -07:00
CODE_OF_CONDUCT.md create code of conduct 2017-12-24 18:11:58 +03:30
CONTRIBUTING.md Change old hardcoded reference to OWASP repo #363 2021-01-11 18:59:13 +05:30
Dockerfile fix: Dockerfile to reduce vulnerabilities 2023-10-13 18:50:33 +00:00
EXTERNAL_LIBRARIES_LICENSES.md Add license for intro.js 2018-06-29 01:32:53 +05:30
LICENSE update license to apache version 2.0 2017-08-27 18:29:07 +04:30
README.md Update README.md 2023-11-30 08:19:02 +01:00
config.py auto service discovery 2021-12-04 23:43:20 +01:00
docker-compose.yml enhacements 2021-08-11 23:12:03 +02:00
logo.txt replace zdr 2021-08-12 21:17:59 +02:00
nettacker.py ditching py2 msg 2021-07-30 14:48:24 +02:00
requirements-apt-get.txt remove unused dependencies 2022-10-07 00:24:39 +02:00
requirements-dev.txt Bump ipython from 8.16.1 to 8.18.1 2023-11-30 22:48:48 +00:00
requirements.txt Bump flask from 3.0.0 to 3.0.1 2024-01-19 22:35:54 +00:00
version.txt Update version.txt 2024-01-19 01:45:38 +00:00

README.md

OWASP Nettacker

Build Status Apache License Twitter GitHub contributors repo size

DISCLAIMER

  • THIS SOFTWARE WAS CREATED FOR AUTOMATED PENETRATION TESTING AND INFORMATION GATHERING. CONTRIBUTORS WILL NOT BE RESPONSIBLE FOR ANY ILLEGAL USAGE.

2018-01-19_0-45-07

OWASP Nettacker project is created to automate information gathering, vulnerability scanning and eventually generating a report for networks, including services, bugs, vulnerabilities, misconfigurations, and other information. This software will utilize TCP SYN, ACK, ICMP, and many other protocols in order to detect and bypass Firewall/IDS/IPS devices. By leveraging a unique method in OWASP Nettacker for discovering protected services and devices such as SCADA. It would make a competitive edge compared to other scanner making it one of the bests.


Quick Setup & Run

$ docker-compose up -d && docker exec -it nettacker_nettacker_1 /bin/bash
# python nettacker.py -i owasp.org -s -m port_scan

Thanks to our awesome contributors

Awesome Contributors


IoT Scanner

  • Python Multi Thread & Multi Process Network Information Gathering Vulnerability Scanner
  • Service and Device Detection ( SCADA, Restricted Areas, Routers, HTTP Servers, Logins and Authentications, None-Indexed HTTP, Paradox System, Cameras, Firewalls, UTM, WebMails, VPN, RDP, SSH, FTP, TELNET Services, Proxy Servers and Many Devices like Juniper, Cisco, Switches and many more… )
  • Asset Discovery & Network Service Analysis
  • Services Brute Force Testing
  • Services Vulnerability Testing
  • HTTP/HTTPS Crawling, Fuzzing, Information Gathering and …
  • HTML, JSON, CSV and Text Outputs
  • API & WebUI
  • This project is at the moment in research and development phase
  • Thanks to Google Summer of Code Initiative and all the students who contributed to this project during their summer breaks:


Stargazers over time

Stargazers over time