# Nettacker | Automated Penetration Testing Framework **URL:** \ **Category:** Tools & Scripts\ **Tags:** programming, hacking, cracking, documents\ **Created:** [July 18, 2024, 7:59pm UTC](https://onehack.st/t/nettacker-automated-penetration-testing-framework/287241 "2024-07-18T19:59:54Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\ **Post date:** [July 18, 2024, 7:59pm UTC](https://onehack.st/t/nettacker-automated-penetration-testing-framework/287241/1 "2024-07-18T19:59:54Z")
# OWASP Nettacker [![Build Status](https://github.com/OWASP/Nettacker/workflows/CI/badge.svg?branch=master)](https://github.com/OWASP/Nettacker/actions/workflows/CI.yml) [![Apache License](https://camo.githubusercontent.com/32fba530f388470d64e4536fdb6726b8e5d5ee824831a9e0c89d3bfb377d50d5/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4c6963656e73652d41706163686525323076322d677265656e2e737667)](https://github.com/OWASP/Nettacker/blob/master/LICENSE) [![Twitter](https://camo.githubusercontent.com/d60b472b2257f7feb285ef4a3d64dcef67efad27d7bfad9424ac14b7d1af91c6/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f547769747465722d40696f747363616e2d626c75652e737667)](https://twitter.com/iotscan) [![GitHub contributors](https://camo.githubusercontent.com/a6b50ea23b85af1fcc06de21e64951af93bad25d4b25bbeb196a0d23ef12a59e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f636f6e7472696275746f72732f4f574153502f4e65747461636b6572)](https://camo.githubusercontent.com/a6b50ea23b85af1fcc06de21e64951af93bad25d4b25bbeb196a0d23ef12a59e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f636f6e7472696275746f72732f4f574153502f4e65747461636b6572) [![repo size](https://camo.githubusercontent.com/d76dc453c5a61617a73228480fce26037fd0c9267176295c750b73329dddf79c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f7265706f2d73697a652f4f574153502f4e65747461636b6572)](https://github.com/OWASP/Nettacker) [![](https://raw.githubusercontent.com/OWASP/Nettacker/master/web/static/img/owasp-nettacker.png)](https://raw.githubusercontent.com/OWASP/Nettacker/master/web/static/img/owasp-nettacker.png)[![](https://raw.githubusercontent.com/OWASP/Nettacker/master/web/static/img/owasp.png)](https://raw.githubusercontent.com/OWASP/Nettacker/master/web/static/img/owasp.png) **DISCLAIMER** - _ **THIS SOFTWARE WAS CREATED FOR AUTOMATED PENETRATION TESTING AND INFORMATION GATHERING. CONTRIBUTORS WILL NOT BE RESPONSIBLE FOR ANY ILLEGAL USAGE.** _ [![2018-01-19_0-45-07](https://user-images.githubusercontent.com/7676267/35123376-283d5a3e-fcb7-11e7-9b1c-92b78ed4fecc.gif)](https://user-images.githubusercontent.com/7676267/35123376-283d5a3e-fcb7-11e7-9b1c-92b78ed4fecc.gif) OWASP Nettacker project is created to automate information gathering, vulnerability scanning and eventually generating a report for networks, including services, bugs, vulnerabilities, misconfigurations, and other information. This software **will** utilize TCP SYN, ACK, ICMP, and many other protocols in order to detect and bypass Firewall/IDS/IPS devices. By leveraging a unique method in OWASP Nettacker for discovering protected services and devices such as SCADA. It would make a competitive edge compared to other scanners making it one of the best. - OWASP Page: [https://owasp.org/www-project-nettacker/](https://owasp.org/www-project-nettacker/) - Wiki: [https://github.com/OWASP/Nettacker/wiki](https://github.com/OWASP/Nettacker/wiki) - Installation: [https://github.com/OWASP/Nettacker/wiki/Installation](https://github.com/OWASP/Nettacker/wiki/Installation) - Usage: [https://github.com/OWASP/Nettacker/wiki/Usage](https://github.com/OWASP/Nettacker/wiki/Usage) - GitHub: [https://github.com/OWASP/Nettacker](https://github.com/OWASP/Nettacker) - Slack: #project-nettacker on [https://owasp.slack.com](https://owasp.slack.com/) - Mailing List: [https://groups.google.com/forum/#!forum/owasp-nettacker](https://groups.google.com/forum/#!forum/owasp-nettacker) - Docker Image: [https://hub.docker.com/r/owasp/nettacker](https://hub.docker.com/r/owasp/nettacker) - How to use the Dockerfile: [https://github.com/OWASP/Nettacker/wiki/Installation#docker](https://github.com/OWASP/Nettacker/wiki/Installation#docker) - OpenHub: [https://www.openhub.net/p/OWASP-Nettacker](https://www.openhub.net/p/OWASP-Nettacker) - **Donate** : [https://owasp.org/donate/?reponame=www-project-nettacker&title=OWASP+Nettacker](https://owasp.org/donate/?reponame=www-project-nettacker&title=OWASP+Nettacker) - **Read More** : [https://www.secologist.com/open-source-projects](https://www.secologist.com/open-source-projects) * * * # Quick Setup & Run $ docker-compose up -d && docker exec -it nettacker-nettacker-1 /bin/bash # python nettacker.py -i [owasp.org](http://owasp.org) -s -m port\_scan - Results are accessible from your ([https://localhost:5000](https://localhost:5000/)) or [https://nettacker-api.z3r0d4y.com:5000/](https://nettacker-api.z3r0d4y.com:5000/) (pointed to your localhost) - The local database is `.data/nettacker.db` (sqlite). - Default results path is `.data/results` - `docker-compose` will share your nettacker folder, so you will not lose any data after `docker-compose down` - To see the API key in you can run `docker logs nettacker_nettacker_1`. - More details and setup without docker [https://github.com/OWASP/Nettacker/wiki/Installation](https://github.com/OWASP/Nettacker/wiki/Installation) * * * # Thanks to our awesome contributors [![Awesome Contributors](https://camo.githubusercontent.com/f9caef853018d0cc63f90bb6f4c5da0cadcb96a62306979a7dde87364b96afb9/68747470733a2f2f636f6e747269622e726f636b732f696d6167653f7265706f3d4f574153502f4e65747461636b6572)](https://camo.githubusercontent.com/f9caef853018d0cc63f90bb6f4c5da0cadcb96a62306979a7dde87364b96afb9/68747470733a2f2f636f6e747269622e726f636b732f696d6167653f7265706f3d4f574153502f4e65747461636b6572) * * * ## _ **IoT Scanner** _ - Python Multi Thread & Multi Process Network Information Gathering Vulnerability Scanner - Service and Device Detection ( SCADA, Restricted Areas, Routers, HTTP Servers, Logins and Authentications, None-Indexed HTTP, Paradox System, Cameras, Firewalls, UTM, WebMails, VPN, RDP, SSH, FTP, TELNET Services, Proxy Servers and Many Devices like Juniper, Cisco, Switches and many more… ) - Asset Discovery & Network Service Analysis - Services Brute Force Testing - Services Vulnerability Testing - HTTP/HTTPS Crawling, Fuzzing, Information Gathering and … - HTML, JSON, CSV and Text Outputs - API & WebUI - This project is at the moment in research and development phase - Thanks to Google Summer of Code Initiative and all the students who contributed to this project during their summer breaks: [![](https://camo.githubusercontent.com/53194c81a6efac77fad67bc9d0a17e7a32eb1d5383338e8bbe45f636aa1aaf3b/68747470733a2f2f626574616e6577732e636f6d2f77702d636f6e74656e742f75706c6f6164732f323031362f30332f766572746963616c2d47536f432d6c6f676f2e6a7067)](https://camo.githubusercontent.com/53194c81a6efac77fad67bc9d0a17e7a32eb1d5383338e8bbe45f636aa1aaf3b/68747470733a2f2f626574616e6577732e636f6d2f77702d636f6e74656e742f75706c6f6164732f323031362f30332f766572746963616c2d47536f432d6c6f676f2e6a7067) * * * ## Stargazers over time [![Stargazers over time](https://camo.githubusercontent.com/8c1976a7545d558f66856bcc949e7a3ca0474d1c824ca299b25eacf20d596a50/68747470733a2f2f7374617263686172742e63632f4f574153502f4e65747461636b65722e737667)](https://starchart.cc/OWASP/Nettacker) ## GitHub: [https://github.com/OWASP/Nettacker](https://github.com/OWASP/Nettacker)