Skip to content

Releases: Hackazillarex/ZillaScan

ZillaScan V1.337

Choose a tag to compare

@Hackazillarex Hackazillarex released this 26 Aug 15:59
b5d3a6a

ZillaScan v1.337 – Auto Pentesting Script 🐉

Release Date: 2025-08-26

ZillaScan is an automated penetration testing toolkit that consolidates multiple web security tools into a single workflow. It helps security researchers and ethical hackers quickly enumerate subdomains, directories, vulnerabilities, and web technologies of a target domain.

⚠️ Legal Notice: Run this script only against targets you have explicit permission to test. Unauthorized use may be illegal.


Features

  • Subdomain enumeration & fuzzing
    • subfinder for domain discovery
    • FFUF for subdomain fuzzing
  • Directory and file brute-forcing
    • Gobuster for hidden directories
  • Vulnerability scanning
    • Nuclei for known CVEs and exploits
    • WPScan for WordPress sites (optional brute-force)
  • Web technology fingerprinting
    • WhatWeb
  • Port scanning
    • Nmap for full port and service enumeration
  • Database enumeration
    • SQLMap for discovering and enumerating SQL databases
  • Email/host recon
    • theHarvester for collecting emails, hosts, and subdomains
  • Automated summary & GPT recommendations
    • Optionally generate AI-guided pentest advice using OpenAI’s GPT models
  • Concurrent execution for faster results

Installation

  1. Clone the repository:
git clone https://github.com/Hackazillarex/ZillaScan.git
cd ZillaScan


Usage:
python3 ZillaScan.py https://target.com

Follow interactive prompts to select which tools to run.

Outputs will be saved in output_<domain>/ with timestamped summary files and JSON reports.

Optionally, generate GPT-powered recommendations for further testing.

Sample Output

summary_<timestamp>.txt – Master summary of all executed tools

report_<timestamp>.json – Structured JSON report for automation

recommendations_<timestamp>.txt – Optional AI-guided pentest suggestions

Changelog v1.337

Initial public release of ZillaScan.

Added GPT integration for automated pentest recommendations.

Concurrent execution of faster scans.

Full support for subdomain, directory, vulnerability, web fingerprinting, and SQL database enumeration.

Contributing

Contributions, bug reports, and feature requests are welcome. Please open an issue or submit a pull request.

Author

Hackazillarex 🐉
📧 Hackazillarex@gmail.com

ZillaScan V1.0

Choose a tag to compare

@Hackazillarex Hackazillarex released this 16 Aug 16:56
2cb07dc

🛡️ ZillaScan v1.0 – Automated Pentesting Toolkit

Release Date: August 16, 2025
Author: Hackazillarex

✨ Features in v1.0

Full automation of subdomain, email, and passive reconnaissance

Organized output stored in output_/

Optional WPScan brute-force prompt

Integrated DNS enumeration, port scanning, and banner grabbing

Directory and web application fuzzing with Gobuster and FFUF

Vulnerability scanning via Nuclei

SQL injection testing using SQLMap

WordPress vulnerability audits with WPScan

Tech stack and CMS fingerprinting using WhatWeb

🛠️ Tools Integrated

dig

subfinder

theHarvester

nmap

ncat

gobuster

ffuf

nuclei

sqlmap

wpscan

whatweb

⚡ Quick Start
python3 ZillaScan.py https://target.com

Follow interactive prompts for optional features like WPScan brute-force scanning.

⚠️ Legal Notice

ZillaScan is intended for ethical hacking and security assessments only. Do not use it on systems you do not own or have explicit permission to test. Unauthorized use is illegal.