PYTHON [ dedsploit : Framework for attacking network protocols and network exploitation ] - Intech Network

Ethical-Hacking & penetration testing & network security assessments

11/26/2018

PYTHON [ dedsploit : Framework for attacking network protocols and network exploitation ]

dedsploit

 

Framework for attacking network protocols and network exploitation.
Official Website: http://dedsploit.tech
Logo

CHANGELOG: v3.0.0 10/29/17

Introducing the newest version of dedsploit. While many of the modules that have been presented in the earlier versions have been removed, the overall quality of the framework has been improved and revamped for usability.

  • Removed the protocol/attack vector system, and make it so that the pentester can select their attack vector immediately from the start.
  • Did some redesigning, and improved the overall code quality.
We hope that you enjoy this rendition of your favorite penetration testing framework!

I. Introduction

This framework aims to exploit and attack some common every-day vulnerabilities, whether it is a misconfiguration of a SSH server, or even the utilization of apache2 as a web server, which could be subjected to malicious Slowloris DoS attacks.
The framework comprises of several attack vectors:

http
==========
* slowloris

net
==========
* arpspoof
* hosts
* pscan

smtp
==========
* smsbomb
More modules will be deployed on a rolling basis.

II. Installation & Usage

In order to install this program, it is best that you are on a Linux-based distro, preferably Kali-Linux. You may also be on macOS, but this rollout is tentative and may be buggy.

Quick n' Dirty One-liner


$ curl https://raw.githubusercontent.com/ex0dus-0x/dedsploit/master/installer | sudo /bin/bash 

Building from Source

First, git clone.

$ git clone https://github.com/ex0dus-0x/dedsploit
Change directory, and then run the installer script (Must be root or have superuser permissions):

$ cd /path/to/dedsploit
$ ./dedsploit



III. TODO


  • [] Misc. module - may include embedded and IOT attack vectors
  • [] Modules:
    • driftnet
    • smtp enumeration
    • mimikatz
  • [] Installer / Uninstaller

IV. Issues?

If you ever have any issues regarding the source code of this framework, as well as any errors you have encountered, please do not hesitate to open a new issue!
Of course, suggestions for modules and attack vectors are always welcome. dedsploit is a young yet-to-mature framework, and we wish to make the best for penetration testers.

Aucun commentaire:

Enregistrer un commentaire