Yasso

Powerful intranet penetration auxiliary toolset - let Yasso be like the wind. Supports brute-forcing of RDP, SSH, Redis, PostgreSQL, MongoDB, MSSQL, MySQL, WinRM and other services, fast port scanning, powerful web fingerprint recognition, one-click exploitation of various built-in services (including SSH fully interactive login, MSSQL privilege escalation, Redis one-click exploitation, MySQL database query, WinRM lateral movement, multiple service exploitation supporting SOCKS5 proxy execution)

New Version Features

Changed scanning and brute-forcing methods based on the original, removed unnecessary features, code is more complete and clean Added protocol identification and port recognition

• The new version has not been released as a release version, please clone and compile it yourself

Features

Usage:
  Yasso [command]

Available Commands:
  all         Use all scanner module (.attention) Traffic is very big   
  completion  Generate the autocompletion script for the specified shell
  exploit     Exploits to attack the service
  help        Help about any command
  service     Detection or blasting services by module

Flags:
  -h, --help            help for Yasso
      --output string   set logger file (default "result.txt")

• all One-click scan function
• exploit Common service exploitation (SQLServer, Redis, SSH, Sunflower, etc.)
• service Service brute-force and sub-scanning modules

For details, refer to -h