Manisso/fsociety

Features

• Penetration Testing Frameworks - Conducting a full security audit from initial reconnaissance and vulnerability scanning to exploiting services and maintaining system access.
• Information Gathering - Discovers host information and software versions using a suite of network scanners and auditors.
• Password Attacks - Provides utilities for cracking credentials and generating wordlists to recover user passwords.
• Password Cracking - Provides tools for brute-forcing and managing password recovery sessions to test credential strength.
• Credential Cracking - Runs dictionary attacks against login services and password hashes to recover credentials.
• Traffic Interception - Captures and modifies network traffic to perform man-in-the-middle attacks.
• Automated Exploit Execution - Executes automated attacks like SQL injection and remote code execution against targeted services.
• Web Application Exploits - Launches automated exploits against web applications and services to confirm unauthorized access.
• Web Exploitation - Provides tools for reconnaissance and exploiting SQL injection, command injection, and remote code execution flaws.
• Web Vulnerability Scanning - Integrates tools to identify and exploit vulnerabilities in web applications.
• Command Line Interface Mappings - Provides a system for mapping abstract user targets and flags to specific executable binaries via a unified interface.
• Security Tool Orchestrators - A wrapper that integrates external security binaries into a unified interface for command-line parameter mapping and execution.
• Target Argument Mappers - Translates user-provided targets and flags into the specific command-line arguments required by underlying security tools.
• Man-in-the-Middle Frameworks - Provides frameworks for intercepting and manipulating network traffic via man-in-the-middle attacks.
• Post-Exploitation Frameworks - Verifies shell connectivity and maintains persistence on a compromised system after an initial breach.
• Post-Exploitation Toolkits - Provides tools for maintaining access and escalating privileges on compromised systems.
• Reconnaissance Workflow Automation - Chains individual reconnaissance and exploitation tools together to automate the transition between different phases of a security audit.
• Web Vulnerability Scanners - A toolkit for detecting SQL injection, cross-site scripting, and exposed directories on target websites.
• Information Gathering Tools - Collects data on targets using scanners to identify active hosts, open ports, and server users.
• Post-Exploitation Tools - Verifies shell connectivity and deploys persistence tools to maintain access after a successful compromise.
• System Exploitation Tools - Automates the discovery and exploitation of vulnerabilities in servers and services to gain unauthorized access.
• Network Reconnaissance Tools - Scans target hosts and ports to map network infrastructure and active services.
• Credential Brute-Forcing - Executes automated dictionary and brute-force attacks to evaluate authentication strength.
• Wireless Security Auditing - A set of tools for exploiting access point vulnerabilities and auditing Bluetooth and Wi-Fi communication protocols.
• Web Application Pipelines - Orchestrates automated probes to detect software bugs and remote code execution vectors in web endpoints.
• Web Security Auditing - Ships toolsets for systematically verifying the security posture of web applications through vulnerability scanning.
• Exploitation Tool Wrappers - Integrates a suite of external security binaries by providing a unified interface for input passing and output capture.
• Security Tool Collections - Groups related security utilities into functional collections for network reconnaissance, web auditing, and credential cracking.
• Sniffing and Spoofing - Captures and manipulates data packets via sniffing, SSL stripping, and spoofing to steal credentials.
• Web Enumeration - Locates specific website types, control panels, and exposed files using automated discovery.
• Wireless Testing - Audits wireless security by exploiting access point vulnerabilities and deploying honeypots.
• Exposed Asset Detection - Searches for unprotected sensitive data by locating open control panels and upload directories.
• Hidden File Discovery - Searches for exposed control panels, archived zip files, and specific CMS installations across the web.
• Private Asset Discovery - Enumerates hidden websites, control panels, and server information to bypass security protections.
• Web Asset Harvesting - Provides capabilities to find specific website types and exposed control panels via automated search queries.
• Web Directory Enumeration Tools - Implements utilities for discovering hidden files and directories on web servers through wordlist-based brute-force testing.
• Web Infrastructure Mapping - Maps target footprints by discovering hidden files and server users while bypassing active protections.
• Functionality Module Organizations - Organizes specialized utilities into domain-specific collections to structure the navigation and execution of toolsets.
• Security Domain Organizations - Organizes specialized utilities into functional domains to structure the navigation and execution of different toolsets.
• Data-Driven Routing - Directs target data through a series of tool wrappers to automate the progression from data gathering to exploitation.
• Security Reconnaissance Modules - Organizes specialized hacking utilities into functional domains like reconnaissance and exploitation for structured navigation.
• Categorized Tool Menus - Provides a categorized menu interface to launch security tools without typing manual command-line arguments.
• Penetration Testing Frameworks - Collection of penetration testing and hacking tools.

Star history