# BabySploit | Beginner Pentesting Toolkit/Framework Written In Python 🐍

**URL:** <https://onehack.st/t/babysploit-beginner-pentesting-toolkit-framework-written-in-python/287310>\
**Category:** Tools & Scripts\
**Tags:** tools, hacking, freebies\
**Created:** [July 19, 2024, 7:59pm UTC](https://onehack.st/t/babysploit-beginner-pentesting-toolkit-framework-written-in-python/287310 "2024-07-19T19:59:40Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\
**Post date:** [July 19, 2024, 7:59pm UTC](https://onehack.st/t/babysploit-beginner-pentesting-toolkit-framework-written-in-python/287310/1 "2024-07-19T19:59:40Z")

</div>

BabySploit is a penetration testing toolkit aimed at making it easy to learn how to use bigger,  
more complicated frameworks like Metasploit. With a very easy to use UI and toolkit, anybody  
from any experience level will find use out of BabySploit. Below are some screenshots of the framework.

# Installation Instructions:

## Using Pip

```auto
sudo apt-get update
sudo apt-get upgrade
sudo apt-get install exploitdb netcat nmap perl php7.0 

# on macOS
brew install exploitdb netcat nmap perl

pip3 install babysploit
babysploit

```

In order to use `search` command you must follow steps [here](https://www.exploit-db.com/searchsploit/#install) to install the searchsploit binary!

## Building From Source

```auto
sudo apt-get update
sudo apt-get upgrade
sudo apt-get install exploitdb netcat nmap perl php7.0

# on macOS
brew install exploitdb netcat nmap perl

git clone https://github.com/M4cs/BabySploit.git
cd BabySploit/
python3 setup.py install
babysploit

```

## Docker Run Command

```auto
docker run --rm -idt --name babysploit xshuden/babysploit # container is deleted when you're done
OR
docker run -idt --name babysploit xshuden/babysploit

```

# Getting Started:

#### Setting Configuration Values:

BabySploit uses ConfigParser in order to write and read configuration. Your config file is automatically generated and located at `./babysploit/config/config.cfg`. You can manually change configuration settings by opening up the file and editing with a text editor or you can use the set command to set a new value for a key. Use the set command like so:

```auto
set rhost
>> Enter Value For rhost: 10
>> Config Key Saved!

```

If before running this command the rhost key had a value of 80, the rhost key after running this command has a value of 10. You can also add configuration variables to the config by using the set command with a new key after it like so:

```auto
set newkey
>> Enter Value For newkey: hello
>> Config Key Saved!

```

Before running this there was no key named “newkey”. After running this you will have a key named “newkey” in your config until you use the `reset` command which resets the saved configuration.

#### Running A Tool

In order to run a tool all you have to do is enter the name of the tool into BabySploit. You can use the `tools` command to display a menu with all the currently available tools. If we run tools we get the depiction:

[![Tools](https://camo.githubusercontent.com/53ad1542b0943dddbdf3e66b2f8baf3f3e4481bfe64e5cc2286caf37bda91e72/68747470733a2f2f696d6167652e70726e747363722e636f6d2f696d6167652f644d6c554f6a466e516b5f4b537972753167545132412e706e67)](https://camo.githubusercontent.com/53ad1542b0943dddbdf3e66b2f8baf3f3e4481bfe64e5cc2286caf37bda91e72/68747470733a2f2f696d6167652e70726e747363722e636f6d2f696d6167652f644d6c554f6a466e516b5f4b537972753167545132412e706e67)

_this depiction may be outdated_

This menu will display the tools available and the description of each tool. To run a tool simply enter the tool name into BabySploit. Ex: `ftpbruteforce` - runs the ftpbruteforce tool.

# Features (Current, In The Works, Planned):

[Visit](https://github.com/M4cs/BabySploit/projects/1) project board for tools.

- Information Gathering
- Exploitation
- Post Exploitation
- Bruteforcing
- Phishing
- Cryptography/Stenography

### Information Gathering:

- Nmap
- IP Info
- Tcpdump (In The Works)
- Datasploit (In The Works)
- Censys Lookup
- DNS Lookup
- Raccoon
- Cloudflare Bypasser

### Exploitation:

- Searchsploit
- ReverseShell Wizard
- FTP Buffer Overflow Scan
- WPSeku WordPress Vuln Scanner

### Post Exploitation:

- In The Works

### Bruteforcing:

- FTP Bruteforcer
- WPSeku WordPress Login Bruteforce

### Phishing:

- BlackEye Python

### Crypto/Stegano:

- MetaKiller
- PDFMeta

## GitHub:

[https://github.com/M4cs/BabySploit](https://github.com/M4cs/BabySploit)