GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → Lucifer1993 → Satansword

Lucifer1993 / Satansword

红队综合渗透框架

Programming Languages

python
139335 projects - #7 most used programming language

Labels

security-toolspentest-toolvulnerability-scannerspocvulnerability-detectionfingerprinting

Projects that are alternatives of or similar to Satansword

Trivy
Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues
Stars: ✭ 9,673 (+1906.85%)
Mutual labels:  security-tools, vulnerability-scanners, vulnerability-detection
Patrowldocs
PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
Stars: ✭ 105 (-78.22%)
Mutual labels:  security-tools, vulnerability-scanners, vulnerability-detection
Lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Stars: ✭ 9,137 (+1795.64%)
Mutual labels:  security-tools, vulnerability-scanners, vulnerability-detection
Vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Stars: ✭ 8,844 (+1734.85%)
Mutual labels:  security-tools, vulnerability-scanners, vulnerability-detection
Hellraiser
Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.
Stars: ✭ 413 (-14.32%)
Mutual labels:  security-tools, vulnerability-scanners, vulnerability-detection
Rapidscan
🆕 The Multi-Tool Web Vulnerability Scanner.
Stars: ✭ 775 (+60.79%)
Mutual labels:  security-tools, vulnerability-scanners, vulnerability-detection
Patrowlmanager
PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform
Stars: ✭ 363 (-24.69%)
Mutual labels:  security-tools, vulnerability-scanners, vulnerability-detection
Vailyn
A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python
Stars: ✭ 103 (-78.63%)
Mutual labels:  pentest-tool, vulnerability-scanners, vulnerability-detection
Rebel Framework
Advanced and easy to use penetration testing framework 💣🔎
Stars: ✭ 183 (-62.03%)
Mutual labels:  security-tools, vulnerability-scanners, vulnerability-detection
Patrowlengines
PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
Stars: ✭ 162 (-66.39%)
Mutual labels:  security-tools, vulnerability-scanners, vulnerability-detection
Detexploit
OSS Vulnerability Scanner for Windows Platform
Stars: ✭ 146 (-69.71%)
Mutual labels:  security-tools, vulnerability-scanners, vulnerability-detection
Nerve
NERVE Continuous Vulnerability Scanner
Stars: ✭ 267 (-44.61%)
Mutual labels:  security-tools, vulnerability-scanners, vulnerability-detection
browserrecon-php
Advanced Web Browser Fingerprinting
Stars: ✭ 29 (-93.98%)
Mutual labels:  fingerprinting, vulnerability-detection, vulnerability-scanners
Vulscan
vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...
Stars: ✭ 486 (+0.83%)
Mutual labels:  security-tools, vulnerability-scanners, poc
Susanoo
A REST API security testing framework.
Stars: ✭ 287 (-40.46%)
Mutual labels:  security-tools, pentest-tool
Osmedeus
Fully automated offensive security framework for reconnaissance and vulnerability scanning
Stars: ✭ 3,391 (+603.53%)
Mutual labels:  security-tools, pentest-tool
Dotdotslash
Search for Directory Traversal Vulnerabilities
Stars: ✭ 297 (-38.38%)
Mutual labels:  security-tools, pentest-tool
Raptor
Web-based Source Code Vulnerability Scanner
Stars: ✭ 314 (-34.85%)
Mutual labels:  security-tools, vulnerability-scanners
Xunfeng
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
Stars: ✭ 3,131 (+549.59%)
Mutual labels:  vulnerability-scanners, vulnerability-detection
Hackerenv
Stars: ✭ 309 (-35.89%)
Mutual labels:  pentest-tool, vulnerability-scanners
View All Similar Projects ➔

SatanSword

红队综合渗透框架

python platform Github Stars GitHub forks license release

>>>功能描述

  • web指纹识别，集成whatweb及wappalyzer所有指纹及自己收集的web服务器指纹1839条+cms指纹1936条。

  • 漏洞PoC检测，提供360+PoC检测脚本内置在数据库中，同时支持漏洞查询和代码查看及一键批量检测功能。

  • 批量web信息和端口信息查询，web信息包括headers，whois，dig，CDN检测，指纹检测，IP位置检测。端口扫描使用masscan+nmap探测常用端口指纹服务。

  • 路径扫描，集成dirsearch的路径字典，通过GET和HEAD两种方法实现。

  • 批量JS查找子域名，参考某大佬写的脚本直接拿过来改了一下，后面会贴上地址链接。

  • 协程支持。

  • 使用google headless，更精准的XSS检测。

  • 完整的日志回溯。

>>>环境设置

  • 安装python3+模块+系统命令+配置api文件

image 修改conf/config.py，在对应的参数中填入自己辅助接口的信息 image

  • 新建mysql数据库名“SatanSword”，导入Heaven_Hell/backuptables路径下面的所有SQL文件

  • 保证下载的chromedriver和chromium版本一致 image

>>>使用说明

  • 设置或取消线程数、cookies image

  • 对多个目标执行多个POC image

  • 所有成功和失败的利用都会写入数据库和日志文件 image

  • CMS指纹识别 image

  • web和ip信息识别，sniper用于单一IP或URL，批量请使用bomber，结果自动保存到数据库中 image

  • JS文件批量检索子域名 image

>>>感谢如下优秀开源项目

https://github.com/nmap/nmap

https://github.com/robertdavidgraham/masscan

https://github.com/knownsec/pocsuite3

https://github.com/Threezh1/JSFinder

https://github.com/urbanadventurer/WhatWeb

https://github.com/chorsley/python-Wappalyzer

>>>特别说明

1.本项目中的所有PoC代码全部转移到 https://github.com/Lucifer1993/PoCHub ，提供json和sql两种文件格式。

2.请遵守《中华人民共和国网络安全法》，禁止将代码用于未授权测试及破坏行为。

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].