# Secator | The Pentester'S Swiss Knife **URL:** \ **Category:** Tools & Scripts\ **Tags:** programming, hacking, trading\ **Created:** [December 6, 2024, 9:03pm UTC](https://onehack.st/t/secator-the-pentesters-swiss-knife/296968 "2024-12-06T21:03:49Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\ **Post date:** [December 6, 2024, 9:03pm UTC](https://onehack.st/t/secator-the-pentesters-swiss-knife/296968/1 "2024-12-06T21:03:49Z")
# [![](https://private-user-images.githubusercontent.com/9629314/289814670-ee203af4-e853-439a-af01-edeabfc4bf07.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.VdPSiMAEHxs8ae4l7AipOcFLhcWpCg0tRnC4NXzU4NM)](https://private-user-images.githubusercontent.com/9629314/289814670-ee203af4-e853-439a-af01-edeabfc4bf07.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.VdPSiMAEHxs8ae4l7AipOcFLhcWpCg0tRnC4NXzU4NM) #### The pentester’s swiss knife. [![](https://camo.githubusercontent.com/113d6bc817de7305ae86870d1912944885c0d4078c0b0f40ea80d33d513e62c4/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f707974686f6e2d332e362d626c75652e737667)](https://camo.githubusercontent.com/113d6bc817de7305ae86870d1912944885c0d4078c0b0f40ea80d33d513e62c4/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f707974686f6e2d332e362d626c75652e737667) [![](https://camo.githubusercontent.com/58798e405af64ba3797c6d859095f657eacdd794b9b1e9c96a433a56d3701b7e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f72656c656173652f667265656c61627a2f73656361746f72)](https://github.com/freelabz/secator/releases) [![](https://camo.githubusercontent.com/6565bc8e8e575f26138873043af6f27143f11959f37f96c01a33a905e4e20163/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4c6963656e73652d42534c253230312e312d627269676874677265656e2e737667)](https://github.com/freelabz/secator/blob/main/LICENSE) [![](https://camo.githubusercontent.com/72cc4d33d64c2b0d35c69b6a257604ef68f354d1ae5ab19c1d1d94d5ad5034a2/68747470733a2f2f696d672e736869656c64732e696f2f707970692f646d2f73656361746f72)](https://pypi.org/project/secator/) [![](https://camo.githubusercontent.com/634d07e11630ebe902120a789992fd62bf0135a826079d86dcad0e759e74ed28/68747470733a2f2f696d672e736869656c64732e696f2f747769747465722f666f6c6c6f772f667265656c61627a2e7376673f6c6f676f3d74776974746572)](https://twitter.com/freelabz) [![](https://camo.githubusercontent.com/24d6e00dba3d9df9f34f6e9b81fcd7dcea79b3bafa19e0f83146040c067f5d60/68747470733a2f2f696d672e736869656c64732e696f2f796f75747562652f6368616e6e656c2f73756273637269626572732f5543752d46365370553068324e5031387a424250303463773f7374796c653d736f6369616c266c6162656c3d537562736372696265253230253430467265654c61627a)](https://youtube.com/@FreeLabz) [Features](https://github.com/freelabz/secator#features) • [Supported commands](https://github.com/freelabz/secator#supported-commands) • [Installation](https://github.com/freelabz/secator#install-secator) • [Usage](https://github.com/freelabz/secator#usage) • [Documentation](https://docs.freelabz.com/) `secator` is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters and security researchers. # Features - **Curated list of commands** - **Unified input options** - **Unified output schema** - **CLI and library usage** - **Distributed options with Celery** - **Complexity from simple tasks to complex workflows** - **Customizable** ## Supported tools `secator` integrates the following tools: | Name | Description | Category | | --- | --- | --- | | [httpx](https://github.com/projectdiscovery/httpx) | Fast HTTP prober. | `http` | | [cariddi](https://github.com/edoardottt/cariddi) | Fast crawler and endpoint secrets / api keys / tokens matcher. | `http/crawler` | | [gau](https://github.com/lc/gau) | Offline URL crawler (Alien Vault, The Wayback Machine, Common Crawl, URLScan). | `http/crawler` | | [gospider](https://github.com/jaeles-project/gospider) | Fast web spider written in Go. | `http/crawler` | | [katana](https://github.com/projectdiscovery/katana) | Next-generation crawling and spidering framework. | `http/crawler` | | [dirsearch](https://github.com/maurosoria/dirsearch) | Web path discovery. | `http/fuzzer` | | [feroxbuster](https://github.com/epi052/feroxbuster) | Simple, fast, recursive content discovery tool written in Rust. | `http/fuzzer` | | [ffuf](https://github.com/ffuf/ffuf) | Fast web fuzzer written in Go. | `http/fuzzer` | | [h8mail](https://github.com/khast3x/h8mail) | Email OSINT and breach hunting tool. | `osint` | | [dnsx](https://github.com/projectdiscovery/dnsx) | Fast and multi-purpose DNS toolkit designed for running DNS queries. | `recon/dns` | | [dnsxbrute](https://github.com/projectdiscovery/dnsx) | Fast and multi-purpose DNS toolkit designed for running DNS queries (bruteforce mode). | `recon/dns` | | [subfinder](https://github.com/projectdiscovery/subfinder) | Fast subdomain finder. | `recon/dns` | | [fping](https://fping.org/) | Find alive hosts on local networks. | `recon/ip` | | [mapcidr](https://github.com/projectdiscovery/mapcidr) | Expand CIDR ranges into IPs. | `recon/ip` | | [naabu](https://github.com/projectdiscovery/naabu) | Fast port discovery tool. | `recon/port` | | [maigret](https://github.com/soxoj/maigret) | Hunt for user accounts across many websites. | `recon/user` | | [gf](https://github.com/tomnomnom/gf) | A wrapper around grep to avoid typing common patterns. | `tagger` | | [grype](https://github.com/anchore/grype) | A vulnerability scanner for container images and filesystems. | `vuln/code` | | [dalfox](https://github.com/hahwul/dalfox) | Powerful XSS scanning tool and parameter analyzer. | `vuln/http` | | [msfconsole](https://docs.rapid7.com/metasploit/msf-overview) | CLI to access and work with the Metasploit Framework. | `vuln/http` | | [wpscan](https://github.com/wpscanteam/wpscan) | WordPress Security Scanner | `vuln/multi` | | [nmap](https://github.com/nmap/nmap) | Vulnerability scanner using NSE scripts. | `vuln/multi` | | [nuclei](https://github.com/projectdiscovery/nuclei) | Fast and customisable vulnerability scanner based on simple YAML based DSL. | `vuln/multi` | | [searchsploit](https://gitlab.com/exploit-database/exploitdb) | Exploit searcher. | `exploit/search` | Feel free to request new tools to be added by opening an issue, but please check that the tool complies with our selection criterias before doing so. If it doesn’t but you still want to integrate it into `secator`, you can plug it in (see the [dev guide](https://docs.freelabz.com/for-developers/writing-custom-tasks)). ## Installation ### Installing secator PipxPipBashDocker ```auto ``` Docker Compose _ **Note:** _ If you chose the Bash, Docker or Docker Compose installation methods, you can skip the next sections and go straight to [Usage](https://github.com/freelabz/secator#usage). ### Installing languages `secator` uses external tools, so you might need to install languages used by those tools assuming they are not already installed on your system. We provide utilities to install required languages if you don’t manage them externally: GoRuby ### Installing tools `secator` does not install any of the external tools it supports by default. We provide utilities to install or update each supported tool which should work on all systems supporting `apt`: All toolsSpecific tools `` Please make sure you are using the latest available versions for each tool before you run secator or you might run into parsing / formatting issues. ### Installing addons `secator` comes installed with the minimum amount of dependencies. There are several addons available for `secator`: workergoogle `` mongodb `` redisdev ` ` trace ` ` build `` ### Install CVEs `secator` makes remote API calls to [https://cve.circl.lu/](https://cve.circl.lu/) to get in-depth information about the CVEs it encounters. We provide a subcommand to download all known CVEs locally so that future lookups are made from disk instead: secator install cves ### Checking installation health To figure out which languages or tools are installed on your system (along with their version): secator health ## Usage secator --help [![](https://github.com/freelabz/secator/raw/main/images/help.png)](https://github.com/freelabz/secator/blob/main/images/help.png) ### Usage examples Run a fuzzing task (`ffuf`): secator x ffuf [http://testphp.vulnweb.com/FUZZ](http://testphp.vulnweb.com/FUZZ) Run a url crawl workflow: secator w url\_crawl [http://testphp.vulnweb.com](http://testphp.vulnweb.com) Run a host scan: secator s host [mydomain.com](http://mydomain.com) and more… to list all tasks / workflows / scans that you can use: secator x --help secator w --help secator s --help ## Learn more To go deeper with `secator`, check out: - Our complete [documentation](https://docs.freelabz.com/) - Our getting started [tutorial video](https://youtu.be/-JmUTNWQDTQ?si=qpAClDWMXo2zwUK7) - Our [Medium post](https://medium.com/p/09333f3d3682) - Follow us on social media: [@freelabz](https://twitter.com/freelabz) on Twitter and [@FreeLabz](https://youtube.com/@FreeLabz) on YouTube ## Stats [![Star History Chart](https://camo.githubusercontent.com/05b5f3e9daade9e8c81e220d96bff3349bc01e69e5c960d66a28a481dea26a9d/68747470733a2f2f6170692e737461722d686973746f72792e636f6d2f7376673f7265706f733d667265656c61627a2f73656361746f7226747970653d44617465)](https://star-history.com/#freelabz/secator&Date) ## GitHub: [https://github.com/freelabz/secator](https://github.com/freelabz/secator)