Cybersec
/
Nettacker
mirror of https://github.com/OWASP/Nettacker.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
2,394 Commits 40 Branches 12 Tags 10 MiB
HTML 59.3%
Python 23.1%
CSS 12%
JavaScript 5.6%
Go to file
dependabot[bot] 91f54722bb
Bump actions/checkout from 4.1.1 to 4.1.2 (#824) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.1.1...v4.1.2)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		2024-03-12 16:34:00 -07:00
.data Fix typo 2022-04-12 17:33:02 -04:00
.github Bump actions/checkout from 4.1.1 to 4.1.2 (#824) 2024-03-12 16:34:00 -07:00
api Fixed Docstring Typo 2024-03-06 14:59:27 +05:30
core Detecting open Dropbear server (#808) 2024-03-11 16:23:45 -07:00
database Disconnect Handling to SQL 2023-07-15 08:38:12 -04:00
lib Detecting open Dropbear server (#808) 2024-03-11 16:23:45 -07:00
modules Module teamcity_cve_2024_27198.yaml 2024-03-06 22:00:12 +00:00
tests/core Fix a typo in sort dictionary method name 2023-10-10 13:28:09 -07:00
web Added pagination feature to the crawler page 2024-03-03 19:17:21 +02:00
.gitattributes Create .gitattributes 2023-07-03 10:25:07 +01:00
.gitignore Update .gitignore: exclude VSCode workspace files 2023-10-10 13:36:13 -07:00
CODE_OF_CONDUCT.md create code of conduct 2017-12-24 18:11:58 +03:30
CONTRIBUTING.md Change old hardcoded reference to OWASP repo #363 2021-01-11 18:59:13 +05:30
Dockerfile fix: Dockerfile to reduce vulnerabilities 2024-03-01 05:28:33 +00:00
EXTERNAL_LIBRARIES_LICENSES.md Add license for intro.js 2018-06-29 01:32:53 +05:30
LICENSE update license to apache version 2.0 2017-08-27 18:29:07 +04:30
README.md Update README.md 2024-02-06 15:28:03 +01:00
config.py auto service discovery 2021-12-04 23:43:20 +01:00
docker-compose.yml enhacements 2021-08-11 23:12:03 +02:00
logo.txt replace zdr 2021-08-12 21:17:59 +02:00
nettacker.py ditching py2 msg 2021-07-30 14:48:24 +02:00
requirements-apt-get.txt remove unused dependencies 2022-10-07 00:24:39 +02:00
requirements-dev.txt Bump flake8 from 6.0.0 to 7.0.0 (#782) 2024-03-11 15:52:03 -07:00
requirements.txt Bump aiohttp from 3.9.1 to 3.9.3 2024-02-02 14:06:44 +00:00
version.txt Update version.txt 2024-01-19 01:45:38 +00:00

README.md

OWASP Nettacker

Build Status Apache License Twitter GitHub contributors repo size

DISCLAIMER

  • THIS SOFTWARE WAS CREATED FOR AUTOMATED PENETRATION TESTING AND INFORMATION GATHERING. CONTRIBUTORS WILL NOT BE RESPONSIBLE FOR ANY ILLEGAL USAGE.

2018-01-19_0-45-07

OWASP Nettacker project is created to automate information gathering, vulnerability scanning and eventually generating a report for networks, including services, bugs, vulnerabilities, misconfigurations, and other information. This software will utilize TCP SYN, ACK, ICMP, and many other protocols in order to detect and bypass Firewall/IDS/IPS devices. By leveraging a unique method in OWASP Nettacker for discovering protected services and devices such as SCADA. It would make a competitive edge compared to other scanner making it one of the bests.

Quick Setup & Run

$ docker-compose up -d && docker exec -it nettacker-nettacker-1 /bin/bash
# python nettacker.py -i owasp.org -s -m port_scan

Thanks to our awesome contributors

Awesome Contributors

IoT Scanner

  • Python Multi Thread & Multi Process Network Information Gathering Vulnerability Scanner
  • Service and Device Detection ( SCADA, Restricted Areas, Routers, HTTP Servers, Logins and Authentications, None-Indexed HTTP, Paradox System, Cameras, Firewalls, UTM, WebMails, VPN, RDP, SSH, FTP, TELNET Services, Proxy Servers and Many Devices like Juniper, Cisco, Switches and many more… )
  • Asset Discovery & Network Service Analysis
  • Services Brute Force Testing
  • Services Vulnerability Testing
  • HTTP/HTTPS Crawling, Fuzzing, Information Gathering and …
  • HTML, JSON, CSV and Text Outputs
  • API & WebUI
  • This project is at the moment in research and development phase
  • Thanks to Google Summer of Code Initiative and all the students who contributed to this project during their summer breaks:

Stargazers over time

Stargazers over time