infinition/Bjorn
Bjorn
Bjorn is a penetration testing framework that automates network scanning, credential brute-forcing, vulnerability assessment, and data exfiltration, all coordinated through an event-driven task pipeline and controlled via a web-based dashboard. Its modular plugin architecture allows independent security modules to be loaded and chained together, with an asynchronous network scanner discovering live hosts and open ports without blocking the main execution flow.
The framework distinguishes itself by integrating a credential brute-force engine that systematically attempts login combinations against network services, alongside a vulnerability assessment module that matches service fingerprints against a local database of known exploits. Post-exploitation data exfiltration capabilities extract sensitive files and database contents from compromised services, while a web-based control interface provides real-time monitoring and task management through RESTful API calls.
For physical monitoring, Bjorn includes an e-Paper display driver that shows real-time operation status on a low-power e-ink screen, complementing the browser-accessible operation dashboard. The project is implemented in Python and provides a comprehensive set of tools for security assessment workflows.
Features
- Penetration Testing Frameworks - An automated security assessment tool that scans networks, exploits vulnerabilities, and exfiltrates data.
- Asynchronous Scanners - Ships an asynchronous network scanner that discovers live hosts and open ports concurrently.
- Live Host Probes - Ships an asynchronous network scanner that discovers live hosts and open ports without blocking execution.
- Network Scanning Tools - Discovers live hosts and open ports on a network to map active devices and services.
- Network Host Discoverers - Scans a network to identify live devices, their IP addresses, and open ports.
- Data Exfiltration Tools - Extracts sensitive files and database contents from compromised services after gaining access.
- Post-Exploitation Frameworks - Extracts sensitive files and database contents from compromised services after gaining initial access.
- Security Management Dashboards - Monitors and interacts with ongoing security tasks through a browser-based web interface.
- Vulnerability Assessment Frameworks - Scans targets for known security weaknesses to identify exploitable flaws.
- Service Fingerprint Matchers - Matches service fingerprints against a local database of known exploits to identify security weaknesses.
- Credential Brute-Forcing - Integrates a credential brute-force engine that systematically attempts login combinations against network services.
- Vulnerability Scanning - Includes a vulnerability assessment module that matches service fingerprints against known exploits.
- Web-Based Dashboards - Provides a browser-based dashboard for real-time monitoring and control of security operations.
- Security Operation Dashboards - Provides a browser interface to monitor and control ongoing security operations and view results in real time.
- Web-Based Control Panels - Provides a browser-accessible dashboard that communicates with the backend via RESTful API calls for task management.
- Event-Driven Pipelines - Coordinates security operations through an event-driven task pipeline that chains scanning, brute-forcing, and exfiltration.
- Modular Plugin Architectures - Employs a modular plugin architecture that loads independent security modules through a shared interface.
Star history
How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
