NullArray/AutoSploit
AutoSploit
AutoSploit ist ein automatisiertes Exploitation-Framework zur Entdeckung von Remote-Hosts und zur Ausführung von Exploit-Modulen in großem Maßstab, um Reverse-Shells zu etablieren. Es fungiert als Tool zur Netzwerkaufklärung und als Orchestrator für Remote-Code-Execution, der die Bereitstellung von Angriffsmodulen gegen mehrere Ziele verwaltet.
Das System bietet einen Proxy-basierten Traffic-Masker, der Netzwerkanfragen über externe Server leitet und HTTP-Header sowie User-Agents rotiert, um den Ursprung der Aktivität zu verschleiern. Es ermöglicht die Orchestrierung benutzerdefinierter Exploits durch die Integration externer Angriffsmodule und das Management von Workspace-Verbindungsparametern.
Das Framework deckt die Zielentdeckung via Suchmaschinen-Queries und API-Integrationen ab sowie das Management von Ziellisten mittels externer Dateien und Whitelists. Zudem enthält es Funktionen für die sitzungsbasierte Listener-Konfiguration, um eingehende Remote-Verbindungen zu erfassen.
Features
- Automated Exploit Execution - Automates the execution of multiple exploit modules against targets to achieve remote code execution at scale.
- Automated Exploitation Frameworks - Provides an integrated platform for automating remote host discovery and large-scale exploit execution.
- Target Discovery - Discovers potentially vulnerable remote hosts using search engine queries and specialized API integrations.
- Search Engine - Collects remote host addresses from search engines using specific keyword queries.
- Traffic Masking Proxies - Routes network requests through external proxy servers and rotates headers to obscure the source of activity.
- User Agent Rotation - Rotates and defines custom HTTP headers and user agents to bypass filters and mimic various clients.
- Exploitation Workflow Managers - Orchestrates listener configurations and custom modules to automate the exploitation of remote services.
- Exploit Orchestration Managers - Manages the deployment of specific attack modules against multiple targets using customized listeners and workspaces.
- Attack Module Loaders - Implements a modular system to load and execute interchangeable attack payloads against target lists.
- Remote Code Execution Tools - Runs sequences of compatible exploit modules to establish active reverse shell sessions on remote targets.
- Reverse Shell Listeners - Sets up network listeners to capture incoming reverse shell connections from compromised targets.
- Custom Attack Integrations - Allows the definition and integration of custom external modules to expand the range of attempted attacks.
- Network Reconnaissance Tools - Collects remote target host addresses via search engines and APIs for security testing.
- Penetration Testing - Executes automated attack sequences against numerous remote systems to establish reverse shells.
- Host File Management - Provides mechanisms to load custom host files and apply whitelists to refine lists of active targets.
- HTTP Header Spoofing - Randomizes HTTP request headers and user agents to disguise the automated nature of network requests.
- Proxy Routing - Routes outgoing network requests through a set of external proxy servers to hide the origin IP.
- Traffic Masking Proxies - Routes exploit traffic through proxies and rotates headers to obscure the source of network activity.
- Network Traffic Obfuscators - Masks network traffic by routing requests through proxies and rotating user agents to evade detection.
- Pentesting Frameworks - Automated exploitation using Shodan and Metasploit modules.
