A comprehensive, modular penetration testing framework that combines web application security, network penetration testing, OS security (Windows/Linux), mobile security (Android/iOS), and PC/desktop security testing into a single powerful tool with professional reporting capabilities.
- SQL Injection Scanner: Detects time-based, error-based, and union-based SQL injection vulnerabilities
- XSS Scanner: Identifies reflected, stored, and DOM-based XSS vulnerabilities
- Directory Brute Forcer: Discovers hidden directories and files
- Parameter Fuzzer: Discovers and fuzzes HTTP parameters
- CSRF Checker: Identifies missing CSRF protection
- Web Crawler: Maps web application structure and endpoints
- Advanced Scanner: Enhanced port scanning with service detection
- Service Fingerprinting: Identifies service versions and detects outdated software
- Credential Tester: Multi-protocol credential testing (SSH, FTP, etc.)
- Protocol Auditor: TLS/SSL configuration analysis
- Network Mapper: Network topology discovery
- Windows Auditor: Windows security configuration checks
- Linux Auditor: Linux security auditing (SUID/SGID, permissions, sudo)
- Privilege Escalation Checker: Identifies common privesc vectors
- Misconfiguration Scanner: OS hardening checks
- Android Analyzer: APK static analysis and permission auditing
- iOS Analyzer: IPA analysis (basic)
- Mobile Network Tester: Mobile app network security testing
- Permission Auditor: App permission analysis
- System Hardening Checker: System configuration security checks
- Antivirus Evasion Tester: AV detection testing
- Persistence Checker: Detects persistence mechanisms
- Python 3.8+
- Required packages:
pip install aiohttp paramiko
scapy- For advanced network analysisrich- For enhanced CLI output
# Test web application for SQL injection and XSS
python main.py web --url http://localhost:8000 --modules sqli,xss
# Full web security scan
python main.py web --url http://localhost:8000 --modules sqli,xss,dir,param,csrf,crawl
# Save report to file
python main.py web --url http://localhost:8000 --output web_report.json# Scan network for open ports
python main.py network --target 192.168.1.0/24 --modules scan
# Fingerprint services on specific ports
python main.py network --target 192.168.1.100 --ports 22,80,443 --modules fingerprint
# Full network assessment
python main.py network --target 192.168.1.0/24 --modules scan,fingerprint,protocol# Linux security audit
python main.py os --target localhost --platform linux --modules audit,privesc
# Windows security audit
python main.py os --target localhost --platform windows --modules audit# Analyze Android APK
python main.py mobile --apk app.apk --modules analyze,permissions# System hardening check
python main.py desktop --target localhost --modules hardening# Full scan (auto-detects target type)
python main.py full --target http://localhost:8000 --output full_report.json# Allow public IPs (requires explicit flag)
python main.py network --target 8.8.8.8 --allow-public
# Custom port ranges
python main.py network --target 192.168.1.0/24 --ports 1-1024
# Module-specific options
python main.py web --url http://localhost:8000 --modules sqli --output report.json- Tests for time-based blind SQLi
- Detects error-based SQLi with database fingerprinting
- Tests union-based SQLi
- Supports MySQL, PostgreSQL, MSSQL, Oracle
- Reflected XSS detection
- Stored XSS testing
- Filter bypass techniques
- Context-aware payload generation
- Async directory/file discovery
- Common wordlists included
- Status code analysis
- Extension fuzzing
- TCP connect scanning
- Service version detection
- OS fingerprinting (basic)
- Banner grabbing
- Protocol-specific probes
- Version extraction
- Vulnerability correlation
- Outdated service detection
- UAC status checking
- Windows Defender status
- Registry security analysis
- Service misconfiguration detection
- SUID/SGID binary analysis
- File permission auditing
- Sudo misconfiguration checks
- Cron job security analysis
The framework includes comprehensive safety controls:
- Target Validation: Blocks public IPs by default (requires
--allow-publicflag) - Rate Limiting: Configurable rate limits per module
- Authorization Warnings: Clear warnings about authorized use only
- Timeout Management: Prevents hanging scans
- Resource Limits: Memory and CPU usage limits
Reports are generated in multiple formats:
- JSON: Machine-readable format
- HTML: Professional HTML reports with visualizations
- Markdown: Human-readable markdown format
Reports include:
- Executive summary with severity breakdown
- Detailed findings with evidence
- Recommendations for remediation
- Module-specific results
pentest_framework/
├── main.py # Main CLI orchestrator
├── core/ # Core framework
│ ├── base_module.py # Base class for all modules
│ ├── reporter.py # Unified reporting engine
│ ├── safety_controls.py # Safety and rate limiting
│ └── config.py # Configuration management
├── modules/ # Testing modules
│ ├── web/ # Web application security
│ ├── network/ # Network security
│ ├── os/ # OS security
│ ├── mobile/ # Mobile security
│ └── desktop/ # Desktop security
└── utils/ # Utilities
├── payloads.py # Common payloads library
├── wordlists.py # Wordlist management
└── exploit_templates.py # Exploit templates (PoC)
python main.py web \
--url http://localhost:8000 \
--modules sqli,xss,dir,csrf \
--output web_assessment.jsonpython main.py network \
--target 192.168.1.0/24 \
--ports 22,80,443,8080 \
--modules scan,fingerprint \
--output network_scan.jsonpython main.py os \
--target localhost \
--platform linux \
--modules audit,privesc \
--output linux_audit.jsonThis is an educational project. Contributions should focus on:
- Improving detection accuracy
- Adding new modules
- Enhancing safety controls
- Improving documentation
This tool is provided strictly for educational purposes and authorized security testing only. It is intended to help security professionals and students learn about security concepts in controlled environments.
- You must have explicit written authorization before testing any system you do not own
- Unauthorized access to computer systems is illegal and punishable under laws including but not limited to the Computer Fraud and Abuse Act (CFAA), Computer Misuse Act, and similar legislation worldwide
- Only use this tool on systems you own, have permission to test, or in isolated lab environments
This software is provided "AS IS" without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose, and noninfringement. The author makes no representations or warranties regarding the accuracy, completeness, or reliability of this software.
In no event shall the author (Nikhil Nagpure) be liable for any direct, indirect, incidental, special, exemplary, or consequential damages (including, but not limited to, procurement of substitute goods or services; loss of use, data, or profits; or business interruption) however caused and on any theory of liability, whether in contract, strict liability, or tort (including negligence or otherwise) arising in any way out of the use of this software, even if advised of the possibility of such damage.
- The user assumes full responsibility for any consequences resulting from the use of this tool
- The author is not responsible for any misuse, damage, or illegal activities performed with this software
- Users are solely responsible for ensuring compliance with all applicable local, state, national, and international laws and regulations
By using this software, you agree to indemnify, defend, and hold harmless the author from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable attorneys fees) arising from or related to your use of this software.
If you discover vulnerabilities using this tool, please follow responsible disclosure practices and report them to the affected parties through appropriate channels.
By using this software, you acknowledge that you have read, understood, and agree to be bound by this disclaimer.
Educational use only. See LICENSE file for details.
Comprehensive documentation is available:
- QUICK_START.md: Get started in 5 minutes
- COMMANDS.md: Complete command reference with all commands and options ⭐
- USAGE_GUIDE.md: Step-by-step practical usage guide ⭐
- DOCUMENTATION.md: Complete reference guide (200+ pages)
- ADVANCED_FEATURES.md: Power user features and techniques
- EXAMPLES.md: Real-world usage examples
- FEATURES.md: Complete feature list
- Intelligent Payload Generation: Context-aware payloads with encoding and evasion (200+ payloads)
- Multi-Vector Attack Chains: Combine multiple attack vectors
- Adaptive Scanning: Adjusts scan intensity based on responses
- Time-Based Analysis: Detects blind vulnerabilities through timing
- Differential Analysis: Compares responses to detect vulnerabilities
- Parallel Execution: High-performance parallel scanning
- Custom Module Development: Extensible plugin system
- Advanced Reporting: Custom templates, trend analysis, report comparison
- CI/CD Integration: Automated security testing in pipelines
- Database Integration: Store findings in databases
- Encrypted Storage: Secure report storage
The framework includes an extensive payload library with 200+ payloads:
- SQL Injection: Time-based, error-based, union-based, boolean-based (50+ payloads)
- XSS: Standard, encoded, filter bypass, DOM-based, polyglot (30+ payloads)
- Command Injection: Unix, Windows, blind (20+ payloads)
- Path Traversal: Multiple encoding techniques (15+ payloads)
- XXE: Various XXE attack vectors (10+ payloads)
- Template Injection: Jinja2, FreeMarker, Velocity, Smarty (20+ payloads)
- SSRF: Multiple SSRF vectors including cloud metadata (10+ payloads)
- Deserialization: Python, Java, PHP
See utils/advanced_payloads.py for complete payload library.
✅ SQL Injection (Time-based, Error-based, Union-based)
✅ XSS (Reflected, Stored, DOM-based)
✅ Directory/File Discovery
✅ Parameter Fuzzing
✅ CSRF Detection
✅ Web Crawling
✅ Advanced Port Scanning
✅ Service Fingerprinting
✅ Multi-Protocol Credential Testing
✅ TLS/SSL Analysis
✅ Network Topology Mapping
✅ Windows Security Auditing
✅ Linux Security Auditing
✅ Privilege Escalation Detection
✅ Misconfiguration Scanning
✅ Android APK Analysis
✅ iOS IPA Analysis
✅ Permission Auditing
✅ Network Security Testing
✅ System Hardening Checks
✅ Antivirus Evasion Testing
✅ Persistence Detection
✅ Modular Architecture (22+ modules)
✅ Professional Reporting (JSON, HTML, Markdown)
✅ Safety Controls & Rate Limiting
✅ Async High-Performance Scanning
✅ Custom Module Development
✅ CI/CD Integration
✅ Advanced Payload Library (200+ payloads)
✅ Comprehensive Documentation (500+ pages)
- Total Modules: 22+
- Total Payloads: 200+
- Supported Protocols: 15+
- Report Formats: 3 (JSON, HTML, Markdown)
- Supported Platforms: Windows, Linux, macOS
- Supported Targets: Web, Network, OS, Mobile, Desktop
# Web security scan
python main.py web --url http://target.com --modules sqli,xss --output report.json
# Network scan
python main.py network --target 192.168.1.0/24 --modules scan --output report.json
# OS security audit
python main.py os --target localhost --platform linux --modules audit --output report.json
# Full comprehensive scan
python main.py full --target http://target.com --output report.json📖 For complete command reference, see COMMANDS.md
📘 For step-by-step usage guide, see USAGE_GUIDE.md
For issues, questions, or contributions:
- Quick Start: QUICK_START.md - Get started in 5 minutes
- Commands Reference: COMMANDS.md - Complete command reference ⭐ NEW
- Usage Guide: USAGE_GUIDE.md - Step-by-step practical guide ⭐ NEW
- Full Documentation: DOCUMENTATION.md - Complete reference (200+ pages)
- Advanced Features: ADVANCED_FEATURES.md - Power user features
- Usage Examples: EXAMPLES.md - Real-world examples
- Feature List: FEATURES.md - Complete feature list
- Issues: Report bugs and feature requests
- Security: Report security issues responsibly
Last Updated: 2024-01-01
Version: 1.0.0
Author: Cyber Lab Team