PenBox – A Penetration Testing Framework

A Penetration Testing Framework , The Hacker’s Repo our hope is in the last version we will have every script that a hacker needs

Also check : Ethical hacking Process – Phase by Phase

Information Gathering :

• Nmap
• Setoolkit
• Port Scanning
• Host To IP
• wordpress user enumeration
• CMS scanner
• XSStracer – checks remote web servers for Clickjacking, Cross-Frame Scripting, Cross-Site Tracing and Host Header Injection
• Doork – Google Dorks Passive Vulnerability Auditor
• Scan A server’s Users

Password Attacks :

• Cupp
• Ncrack

Wireless Testing :

• reaver
• pixiewps
• Bluetooth Honeypot GUI Framework

Exploitation Tools :

• Venom
• sqlmap
• Shellnoob
• commix
• FTP Auto Bypass
• jboss-autopwn
• Blind SQL Automatic Injection And Exploit
• Bruteforce the Android Passcode given the hash and salt
• Joomla, Mambo, PHP-Nuke, and XOOPS CMS SQL injection Scanner

Sniffing & Spoofing :

• Setoolkit
• SSLtrip
• pyPISHER
• SMTP Mailer

Web Hacking :

• Drupal Hacking
• Inurlbr
• WordPress & Joomla Scanner
• Gravity Form Scanner
• File Upload Checker
• WordPress Exploit Scanner
• WordPress Plugins Scanner
• Shell and Directory Finder
• Joomla! 1.5 – 3.4.5 remote code execution
• Vbulletin 5.X remote code execution
• BruteX – Automatically brute force all services running on a target
• Arachni – Web Application Security Scanner Framework
• Sub-domain Scanning
• WordPress Scanning
• WordPress Username Enumeration
• WordPress Backup Grabbing
• Sensitive File Detection
• Same-Site Scripting Scanning
• Click Jacking Detection
• Powerful XSS vulnerability scanning
• SQL Injection vulnerability scanning

Private Tools

• Get all websites
• Get joomla websites
• Get wordpress websites
• Find control panel
• Find zip files
• Find upload files
• Get server users
• Scan from SQL injection
• Scan ports (range of ports)
• Scan ports (common ports)
• Get server banner
• Bypass Cloudflare

Post Exploitation

• Shell Checker
• POET
• Weeman – Phishing Framework
• Insecure Web Interface
• Insufficient Authentication/Authorization
• Insecure Network Services
• Lack of Transport Encryption
• Privacy Concerns
• Insecure Cloud Interface
• Insecure Mobile Interface
• Insufficient Security Configurability
• Insecure Software/Firmware
• Poor Physical Security

Recon

• Sniper

Installation

git clone https://github.com/x3omdax/PenBox.git

Fedy Wesleti

Fedy Wesleti , 17 years old from Tunisia .He does penetration testing as a hobby , python is one of the programming languages that he mastered.