You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
157 lines
5.0 KiB
157 lines
5.0 KiB
3 years ago
|
## pocsuite3 <https://github.com/knownsec/pocsuite3>
|
||
|
|
<!--auto_detail_badge_begin_0b490ffb61b26b45de3ea5d7dd8a582e-->
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
<!--auto_detail_badge_end_fef74f2d7ea73fcc43ff78e05b1e7451-->
|
||
|
|
|
||
|
|
|
||
|
|
## Legal Disclaimer
|
||
|
|
Usage of pocsuite3 for attacking targets without prior mutual consent is illegal.
|
||
|
|
pocsuite3 is for security testing purposes only
|
||
|
|
|
||
|
|
## 法律免责声明
|
||
|
|
未经事先双方同意，使用 pocsuite3 攻击目标是非法的。
|
||
|
|
pocsuite3 仅用于安全测试目的
|
||
|
|
|
||
|
|
## Overview
|
||
|
|
|
||
|
|
pocsuite3 is an open-sourced remote vulnerability testing and proof-of-concept development framework developed by the [**Knownsec 404 Team**](http://www.knownsec.com/).
|
||
|
|
It comes with a powerful proof-of-concept engine, many nice features for the ultimate penetration testers and security researchers.
|
||
|
|
|
||
|
|
## Features
|
||
|
|
* PoC scripts can running with `verify`, `attack`, `shell` mode in different way
|
||
|
|
* Plugin ecosystem
|
||
|
|
* Dynamic loading PoC script from any where (local file, redis, database, Seebug ...)
|
||
|
|
* Load multi-target from any where (CIDR, local file, redis, database, Zoomeye, Shodan ...)
|
||
|
|
* Results can be easily exported
|
||
|
|
* Dynamic patch and hook requests
|
||
|
|
* Both command line tool and python package import to use
|
||
|
|
* IPV6 support
|
||
|
|
* Global HTTP/HTTPS/SOCKS proxy support
|
||
|
|
* Simple spider API for PoC script to use
|
||
|
|
* Integrate with [Seebug](https://www.seebug.org) (for load PoC from Seebug website)
|
||
|
|
* Integrate with [ZoomEye](https://www.zoomeye.org) (for load target from ZoomEye `Dork`)
|
||
|
|
* Integrate with [Shodan](https://www.shodan.io) (for load target from Shodan `Dork`)
|
||
|
|
* Integrate with [Ceye](http://ceye.io/) (for verify blind DNS and HTTP request)
|
||
|
|
* Integrate with [Interactsh](https://github.com/projectdiscovery/interactsh) (for verify blind DNS and HTTP request)
|
||
|
|
* Integrate with Fofa (for load target from Fofa `Dork`)
|
||
|
|
* Friendly debug PoC scripts with IDEs
|
||
|
|
* More ...
|
||
|
|
|
||
|
|
## Screenshots
|
||
|
|
|
||
|
|
### pocsuite3 console mode
|
||
|
|
[](https://asciinema.org/a/219356)
|
||
|
|
|
||
|
|
### pocsuite3 shell mode
|
||
|
|
[](https://asciinema.org/a/203101)
|
||
|
|
|
||
|
|
### pocsuite3 load PoC from Seebug
|
||
|
|
[](https://asciinema.org/a/207350)
|
||
|
|
|
||
|
|
### pocsuite3 load multi-target from ZoomEye
|
||
|
|
[](https://asciinema.org/a/133344)
|
||
|
|
|
||
|
|
### pocsuite3 load multi-target from Shodan
|
||
|
|
[](https://asciinema.org/a/207349)
|
||
|
|
|
||
|
|
## Requirements
|
||
|
|
|
||
|
|
- Python 3.6+
|
||
|
|
- Works on Linux, Windows, Mac OSX, BSD, etc.
|
||
|
|
|
||
|
|
## Installation
|
||
|
|
|
||
|
|
Paste at a terminal prompt:
|
||
|
|
|
||
|
|
### Python pip
|
||
|
|
|
||
|
|
``` bash
|
||
|
|
pip3 install pocsuite3
|
||
|
|
|
||
|
|
# use other pypi mirror
|
||
|
|
pip3 install -i https://pypi.tuna.tsinghua.edu.cn/simple pocsuite3
|
||
|
|
```
|
||
|
|
|
||
|
|
### MacOS
|
||
|
|
|
||
|
|
``` bash
|
||
|
|
brew update
|
||
|
|
brew info pocsuite3
|
||
|
|
brew install pocsuite3
|
||
|
|
```
|
||
|
|
|
||
|
|
### [Debian](https://tracker.debian.org/pkg/pocsuite3), [Ubuntu](https://launchpad.net/ubuntu/+source/pocsuite3), [Kali](http://pkg.kali.org/pkg/pocsuite3)
|
||
|
|
|
||
|
|
``` bash
|
||
|
|
sudo apt update
|
||
|
|
sudo apt install pocsuite3
|
||
|
|
```
|
||
|
|
|
||
|
|
### ArchLinux
|
||
|
|
|
||
|
|
``` bash
|
||
|
|
yay pocsuite3
|
||
|
|
```
|
||
|
|
|
||
|
|
###
|
||
|
|
|
||
|
|
Or click [here](https://github.com/knownsec/pocsuite3/archive/master.zip) to download the latest source zip package and extract
|
||
|
|
|
||
|
|
``` bash
|
||
|
|
$ wget https://github.com/knownsec/pocsuite3/archive/master.zip
|
||
|
|
$ unzip master.zip
|
||
|
|
$ cd pocsuite3-master
|
||
|
|
$ pip3 install -r requirements.txt
|
||
|
|
$ python3 setup.py install
|
||
|
|
```
|
||
|
|
|
||
|
|
|
||
|
|
The latest version of this software is available at: https://pocsuite.org
|
||
|
|
|
||
|
|
## Documentation
|
||
|
|
|
||
|
|
Documentation is available in the [```docs```](https://github.com/knownsec/pocsuite3/blob/master/docs) directory.
|
||
|
|
|
||
|
|
## Usage
|
||
|
|
|
||
|
|
```
|
||
|
|
cli mode
|
||
|
|
|
||
|
|
# basic usage, use -v to set the log level
|
||
|
|
pocsuite -u http://example.com -r example.py -v 2
|
||
|
|
|
||
|
|
# run poc with shell mode
|
||
|
|
pocsuite -u http://example.com -r example.py -v 2 --shell
|
||
|
|
|
||
|
|
# search for the target of redis service from ZoomEye and perform batch detection of vulnerabilities. The thread is set to 20
|
||
|
|
pocsuite -r redis.py --dork service:redis --threads 20
|
||
|
|
|
||
|
|
# load all poc in the poc directory and save the result as html
|
||
|
|
pocsuite -u http://example.com --plugins poc_from_pocs,html_report
|
||
|
|
|
||
|
|
# load the target from the file, and use the poc under the poc directory to scan
|
||
|
|
pocsuite -f batch.txt --plugins poc_from_pocs,html_report
|
||
|
|
|
||
|
|
# load CIDR target
|
||
|
|
pocsuite -u 10.0.0.0/24 -r example.py --plugins target_from_cidr
|
||
|
|
|
||
|
|
# the custom parameters `command` is implemented in ecshop poc, which can be set from command line options
|
||
|
|
pocsuite -u http://example.com -r ecshop_rce.py --attack --command "whoami"
|
||
|
|
|
||
|
|
console mode
|
||
|
|
poc-console
|
||
|
|
```
|
||
|
|
|
||
|
|
|
||
|
|
<!--auto_detail_active_begin_e1c6fb434b6f0baf6912c7a1934f772b-->
|
||
|
|
## 项目相关
|
||
|
|
|
||
|
|
|
||
|
|
## 最近更新
|
||
|
|
|
||
|
|
<!--auto_detail_active_end_f9cf7911015e9913b7e691a7a5878527-->
|