GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → alienwithin → Owasp Mth3l3m3nt Framework

alienwithin / Owasp Mth3l3m3nt Framework

OWASP Mth3l3m3nt Framework is a penetration testing aiding tool and exploitation framework. It fosters a principle of attack the web using the web as well as pentest on the go through its responsive interface.

Programming Languages

javascript
184084 projects - #8 most used programming language

Labels

databasemysqlwebhttpnginxstreamsocketcrudwebserverapachecurlbotnet

Projects that are alternatives of or similar to Owasp Mth3l3m3nt Framework

Config
Armbian configuration utility
Stars: ✭ 317 (+128.06%)
Mutual labels:  mysql, nginx, apache
Docker Testing
Stars: ✭ 18 (-87.05%)
Mutual labels:  mysql, nginx, apache
Devilbox
A modern Docker LAMP stack and MEAN stack for local development
Stars: ✭ 3,598 (+2488.49%)
Mutual labels:  mysql, nginx, apache
Simple Crud
PHP library to provide magic CRUD in MySQL/Sqlite databases with zero configuration
Stars: ✭ 190 (+36.69%)
Mutual labels:  database, mysql, crud
Electrocrud
Database CRUD Application Built on Electron | MySQL, Postgres, SQLite
Stars: ✭ 1,267 (+811.51%)
Mutual labels:  database, mysql, crud
Php Crud Api
Single file PHP script that adds a REST API to a SQL database
Stars: ✭ 2,904 (+1989.21%)
Mutual labels:  database, mysql, crud
Ansible Role Htpasswd
Ansible Role - htpasswd
Stars: ✭ 17 (-87.77%)
Mutual labels:  nginx, webserver, apache
Ezhttp
The bash shell script stack for installation of Nginx OpenResty Tengine lua_nginx_module nginx_concat_module nginx_upload_module ngx_substitutions_filter_module　Apache-2.2 Apache-2.4　MySQL-5.1 MySQL-5.5 MySQL-5.6 MySQL-5.7 PHP-5.2 PHP-5.3 PHP-5.4 PHP-5.5 PHP-5.6 ZendOptimizer ZendGuardLoader Xcache Eaccelerator Imagemagick IonCube Memcache Memcached Redis Mongo Xdebug Mssql Memcached PureFtpd PhpMyAdmin Redis Mongodb PhpRedisAdmin MemAdmin RockMongo Jdk7 Jdk8 Tomcat7 Tomcat8
Stars: ✭ 443 (+218.71%)
Mutual labels:  mysql, nginx, apache
Shorty
🔗 A URL shortening service built using Flask and MySQL
Stars: ✭ 78 (-43.88%)
Mutual labels:  database, mysql, nginx
Docs4dev
后端开发常用框架文档及中文翻译，包含 Spring 系列文档（Spring, Spring Boot, Spring Cloud, Spring Security, Spring Session），大数据（Apache Hive, HBase, Apache Flume），日志（Log4j2, Logback），Http Server（NGINX，Apache），Python，数据库（OpenTSDB，MySQL，PostgreSQL）等最新官方文档以及对应的中文翻译。
Stars: ✭ 974 (+600.72%)
Mutual labels:  mysql, nginx, apache
Guacamole Install Rhel 7
Apache Guacamole installation bash script for RHEL 7 and CentOS 7 including options for Nginx, HTTPS, SSL, LDAP, Let's Encrypt certificates and more
Stars: ✭ 174 (+25.18%)
Mutual labels:  mysql, nginx, apache
Node Mysql Utilities
Query builder for node-mysql with introspection, etc.
Stars: ✭ 98 (-29.5%)
Mutual labels:  database, mysql, crud
Developer
Gameserver, Voiceserver, Rootserver Webinterface
Stars: ✭ 161 (+15.83%)
Mutual labels:  mysql, nginx, apache
Php Sql Query Builder
An elegant lightweight and efficient SQL Query Builder with fluid interface SQL syntax supporting bindings and complicated query generation.
Stars: ✭ 313 (+125.18%)
Mutual labels:  database, mysql, crud
Goaccess
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.
Stars: ✭ 14,096 (+10041.01%)
Mutual labels:  nginx, webserver, apache
Netkiller.github.io
Netkiller Free ebook - 免费电子书
Stars: ✭ 861 (+519.42%)
Mutual labels:  mysql, nginx, apache
Dockerweb
A docker-powered bash script for shared web hosting management. The ultimate Docker LAMP/LEMP Stack.
Stars: ✭ 89 (-35.97%)
Mutual labels:  mysql, nginx, apache
Notebook
我的技术笔记本~
Stars: ✭ 118 (-15.11%)
Mutual labels:  mysql, curl, nginx
Online Shopping System Advanced
Demo site
Stars: ✭ 127 (-8.63%)
Mutual labels:  database, mysql
Directus
Open-Source Data Platform 🐰 — Directus wraps any SQL database with a real-time GraphQL+REST API and an intuitive app for non-technical users.
Stars: ✭ 13,190 (+9389.21%)
Mutual labels:  database, mysql
View All Similar Projects ➔

#OWASP Mth3l3m3nt Framework

A slightly major (forgive pun) upgrade is on going. This is to bring in things like:

  • Easier coding standard
  • Support for PHP 8
  • More robust features
  • Fix bug requests sent in.

This tool is released under GNU Affero General Public License v3.

Modules Packed in so far are:

  • Payload Store
  • Shell Generator (PHP/ASP/JSP/JSPX/CFM)
  • Payload Encoder and Decoder (Base64/Rot13/Hex/Hexwith \x seperator/ Hex with 0x Prefix)
  • CURL GUI (GET/POST/TRACE/OPTIONS/HEAD)
  • LFI Exploitation module (currently prepacked with: Koha Lib Lime LFI/ Wordpress Aspose E-book generator LFI/ Zimbra Collaboration Server LFI)
  • HTTP Bot Herd to control web shells.
  • WHOIS
  • String Tools
  • Client Side Obfuscator
  • Cookie Theft Database (Enables you to steal session cookies & download page content if a stored XSS is present)

Currently it is set to use a flat file database.

Copy all the files into your webroot except db_dump_optional

Ensure the Folders Below are writeable:

  • tmp
  • framework/data
  • framework/data/site_config.json
  • incoming/
  • scripts/

It should run from the get go All just navigate to it.

the login url is: /cnc

username:mth3l3m3nt password:mth3l3m3nt

By Default I have set it to use the JIG database but this you can change at any point in the backend. The DB Dump in place is for users who use MySQL and need demo data. Unfortunately I have only done for MySQL. It's my DB of choice.

Alternatively watch the installation here:

https://www.youtube.com/playlist?list=PL8peOGsl5TC4WscgWaNMx0xJlS6X2QJI0

If you would like to switch from JIG you can do so in the settings. Please note the DB has to be created, it only populates it with the required tables, it doesn't drop or create the DB , other supported Databases are:

  • Mongo DB
  • MSSQL
  • PostgreSQL
  • SQLite
  • MySQL

Other than SQLite please ensure that you have the PHP extensions for the Databases above so that it can access them through PHP Data Objects.

For MySQL users needing MySQL Sample Data like alot of it especially payloads switch the database to MySQL and import data from the Dump to populate.

Incase of questions or suggestions or bugs and what nots: http://munir.skilledsoft.com

You may also send them or subscribe to the mailing list: https://lists.owasp.org/mailman/listinfo/owasp-mth3l3m3nt-framework-project

It's been tested on :

  • Apache
  • Litespeed
  • Nginx
  • Lighttpd

Incase you test on another server please give your review.

If installing it in a subfolder edit the .htaccess file to reflect the RewriteBase as the subfolder.

Having Problems getting it running on your webserver, check out our webserver configuration guide.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].