---

📸 스크린샷

---

🚀 기능

┌─────────────────────────────────────────────────────────────────────┐
│  ✅ 5-Phase Pipeline    │  Recon → Scan → Vuln → Exploit → Report  │
│  ✅ 30+ Tools           │  nmap, nuclei, sqlmap, ffuf, owscan...  │
│  ✅ Auto-Install        │  Missing tools via onex (370+ tools)     │
│  ✅ PoC Generation      │  Every finding with proof-of-concept     │
│  ✅ Multi-Format Reports│  HTML, Markdown, JSON, CSV, SARIF        │
│  ✅ Non-Standard Ports  │  Full support for custom ports           │
│  ✅ Cross-Validation    │  Two-source confirmation for accuracy    │
└─────────────────────────────────────────────────────────────────────┘

⚡ 빠른 시작

1. 의존성 설치

# Auto-install all tools via onex
cd ~/.pi/agent/skills/pentx/scripts
python3 lib/tool_manager.py auto

# Or manually check
bash tools_check.sh

2. 전체 VAPT 스캔 실행

python3 pentx.py https://target.com:4280/

3. 단일 단계 실행

python3 pentx.py https://target.com --phase 1   # Recon only
python3 pentx.py https://target.com --phase 3   # Vuln assessment
python3 pentx.py https://target.com --phase 5   # Report only

4. 고속 모드

python3 pentx.py https://target.com --fast      # Skip nmap + nuclei
python3 pentx.py https://target.com --no-exploit # Read-only

🔧 도구 스택

---

📊 5단계 워크플로

┌──────────────────────────────────────────────────────────────────────┐
│                                                                      │
│  ┌─────────────┐  ┌─────────────┐  ┌─────────────┐  ┌─────────────┐  ┌─────────────┐
│  │   PHASE 1   │→ │   PHASE 2   │→ │   PHASE 3   │→ │   PHASE 4   │→ │   PHASE 5   │
│  │  Recon      │  │  Scan       │  │  Vuln       │  │  Exploit    │  │  Report     │
│  │             │  │             │  │             │  │             │  │             │
│  │ • Subdomain │  │ • Nmap      │  │ • SQLi      │  │ • SQLi Exp  │  │ • HTML      │
│  │ • Tech Stack│  │ • Nikto     │  │ • LFI/XSS   │  │ • Auth Test │  │ • Markdown  │
│  │ • Nuclei    │  │ • FFUF      │  │ • OWScan    │  │ • PoC Gen   │  │ • JSON/CSV  │
│  └─────────────┘  └─────────────┘  └─────────────┘  └─────────────┘  └─────────────┘
│                                                                      │
└──────────────────────────────────────────────────────────────────────┘

🛠️ 통합

onex 패키지 관리자

# Check tool status
python3 lib/tool_manager.py status

# Auto-install all missing tools
python3 lib/tool_manager.py auto

# Install specific tool
python3 lib/tool_manager.py install nikto

# List all 370+ tools
python3 lib/tool_manager.py list

owscan 웹 스캐너

# Run owscan standalone
php tools/owscan/owscan.php -u https://target.com:4280/

# Via wrapper (auto-parses to pentx format)
python3 lib/owscan_wrapper.py https://target.com:4280/ output/owscan

📁 출력 구조

output/
├── phase1-recon/        # Recon assets, live hosts, nuclei, findings
├── phase2-scan/         # Nmap XML, ffuf, nikto, findings
├── phase3-vuln/         # SQLi, LFI/XSS/SSRF PoCs + findings
├── phase4-exploit/      # PoC artifacts, banner verification
├── report.html          # HTML report (exec + PoC cards)
├── report.md            # Full technical Markdown report
├── exec-summary.md      # Leadership summary
├── findings-merged.json # Machine-readable findings
├── findings.csv         # CSV for spreadsheets
├── findings.sarif       # SARIF for CI/CD
└── poc-full/            # Per-finding PoC .txt artifacts

🎯 PoC 형식 예시

═══════════════════════════════════════════════════════════════
  SQL Injection on 'id' — https://target.com:4280/page
═══════════════════════════════════════════════════════════════

Request:
  GET /page?id=1'+AND+1=1-- HTTP/1.1
  Host: target.com:4280

Response:
  HTTP/1.1 200 OK
  [Page content with true condition]

Severity: Critical (CVSS 9.8)
Remediation: Use parameterized queries / prepared statements.
═══════════════════════════════════════════════════════════════

---

🔒 안전 규칙

규칙	설명
⚠️ 권한 부여	승인된 대상에만 실행
📖 읽기 전용	기본 모드, --no-exploit 사용
🚫 비파괴	DoS 없음, 데이터 파괴 없음
⏱️ 타임아웃	모든 프로브는 짧은 타임아웃 사용
🔐 안전한 SQLi	--batch 모드, 제한된 level/risk

---

📚 CLI 레퍼런스

python3 pentx.py <target> [output] [options]

Options:
  --phase N           Run single phase (1-5)
  --no-exploit        Skip Phase 4 (exploitation)
  --fast              Skip nmap + nuclei, fast scan
  --skip-nmap         Skip nmap scan
  --skip-nuclei       Skip nuclei scan
  --target-port N     Override target port
  --timeout N         Per-phase timeout (default: 300s)
  --check             Check tool availability
  --report <dir>      Regenerate report from output dir
  --tools <cmd>       Tool manager: status|install|list|auto
  --owscan <url>      Run owscan standalone

---

🏆 후원

---

🙏 크레딧

프로젝트	설명	링크
onex	Kali 해킹 도구 설치 프로그램	jackind424/onex
owscan	웹 취약점 스캐너	gameye98/owscan
nuclei	템플릿 기반 스캐너	projectdiscovery/nuclei
sqlmap	SQLi 자동화	sqlmapproject/sqlmap
ffuf	웹 퍼저	ffuf/ffuf

---

📄 라이선스

MIT 라이선스 — 자세한 내용은 LICENSE를 참조하세요.

---