PenBox – Un Framework per Penetration Testing

Un Framework per Penetration Testing, Il Repository dell'Hacker, la nostra speranza è che nell'ultima versione avremo ogni script di cui un hacker ha bisogno

#Raccolta Informazioni :

• nmap
• Setoolkit
• Port Scanning
• Host To IP
• wordpress user enumeration
• CMS scanner
• XSStracer - controlla i server web remoti per Clickjacking, Cross-Frame Scripting, Cross-Site Tracing e Host Header Injection
• Doork - Google Dorks Passive Vulnerability Auditor
• Scan A server's Users

#Attacchi Password :

• Cupp
• Ncrack
• AutoBrowser Screenshot

#Test Wireless :

• reaver
• pixiewps
• Bluetooth Honeypot GUI Framework

#Strumenti di Exploitation :

• Venom
• sqlmap
• Shellnoob
• commix
• FTP Auto Bypass
• jboss-autopwn
• Blind SQL Automatic Injection And Exploit
• Bruteforce the Android Passcode given the hash and salt
• Joomla, Mambo, PHP-Nuke, e XOOPS CMS SQL injection Scanner
• cms Few
• BLACKBOx
• Liffy

#Sniffing & Spoofing :

• Setoolkit
• SSLtrip
• pyPISHER
• SMTP Mailer

#Web Hacking :

• Drupal Hacking
• Inurlbr
• Wordpress & Joomla Scanner
• Gravity Form Scanner
• File Upload Checker
• Wordpress Exploit Scanner
• Wordpress Plugins Scanner
• Shell and Directory Finder
• Joomla! 1.5 - 3.4.5 remote code execution
• Vbulletin 5.X remote code execution
• BruteX - Forza bruta automaticamente tutti i servizi in esecuzione su un target
• Arachni - Framework di scansione per la sicurezza delle applicazioni web
• Sub-domain Scanning
• Wordpress Scanning
• Wordpress Username Enumeration
• Wordpress Backup Grabbing
• Sensitive File Detection
• Same-Site Scripting Scanning
• Click Jacking Detection
• Potente scansione delle vulnerabilità XSS
• Scansione delle vulnerabilità SQL Injection

#Strumenti Privati

• Get all websites
• Get joomla websites
• Get wordpress websites
• Find control panel
• Find zip files
• Find upload files
• Get server users
• Scan from SQL injection
• Scan ports (range of ports)
• Scan ports (common ports)
• Get server banner
• Bypass Cloudflare

#Post Exploitation

• Shell Checker
• POET
• Weeman - Framework di Phishing
• Insecure Web Interface
• Insufficient Authentication/Authorization
• Insecure Network Services
• Lack of Transport Encryption
• Privacy Concerns
• Insecure Cloud Interface
• Insecure Mobile Interface
• Insufficient Security Configurability
• Insecure Software/Firmware
• Poor Physical Security
• Radium-Keylogger - Keylogger Python con molteplici funzionalità

#Recon

• Sniper

#Penetrazione Smartphone

• Attach Framework to a Deployed Agent/Create Agent
• Send Commands to an Agent
• View Information Gathered
• Attach Framework to a Mobile Modem
• Run a remote attack
• Run a social engineering or client side attack
• Compile code to run on mobile devices
• Install Stuff
• Use Drozer
• Setup API
• Bruteforce the Android Passcode given the hash and salt

#Altri

• QrlJacking-Framework
• Sniffles - Generatore di Catture di Pacchetti per IDS e Valutazione di Espressioni Regolari

#Installazione git clone https://github.com/x3omdax/PenBox.git