NullArray/AutoSploit
AutoSploit
AutoSploit is an automated exploitation framework designed for discovering remote hosts and executing exploit modules at scale to establish reverse shells. It functions as a network reconnaissance tool and a remote code execution orchestrator, managing the deployment of attack modules against multiple targets.
The system features a proxy-based traffic masker that routes network requests through external servers and rotates HTTP headers and user agents to obscure the source of activity. It allows for custom exploit orchestration through the integration of external attack modules and the management of workspace connection parameters.
The framework covers target discovery via search engine queries and API integrations, as well as target list management using external files and whitelists. It further includes capabilities for session-based listener configuration to capture incoming remote connections.
Features
- Automated Exploit Execution - Automates the execution of multiple exploit modules against targets to achieve remote code execution at scale.
- Automated Exploitation Frameworks - Provides an integrated platform for automating remote host discovery and large-scale exploit execution.
- Target Discovery - Discovers potentially vulnerable remote hosts using search engine queries and specialized API integrations.
- Search Engine - Collects remote host addresses from search engines using specific keyword queries.
- Traffic Masking Proxies - Routes network requests through external proxy servers and rotates headers to obscure the source of activity.
- User Agent Rotation - Rotates and defines custom HTTP headers and user agents to bypass filters and mimic various clients.
- Exploitation Workflow Managers - Orchestrates listener configurations and custom modules to automate the exploitation of remote services.
- Exploit Orchestration Managers - Manages the deployment of specific attack modules against multiple targets using customized listeners and workspaces.
- Attack Module Loaders - Implements a modular system to load and execute interchangeable attack payloads against target lists.
- Remote Code Execution Tools - Runs sequences of compatible exploit modules to establish active reverse shell sessions on remote targets.
- Reverse Shell Listeners - Sets up network listeners to capture incoming reverse shell connections from compromised targets.
- Custom Attack Integrations - Allows the definition and integration of custom external modules to expand the range of attempted attacks.
- Network Reconnaissance Tools - Collects remote target host addresses via search engines and APIs for security testing.
- Penetration Testing - Executes automated attack sequences against numerous remote systems to establish reverse shells.
- Host File Management - Provides mechanisms to load custom host files and apply whitelists to refine lists of active targets.
- HTTP Header Spoofing - Randomizes HTTP request headers and user agents to disguise the automated nature of network requests.
- Proxy Routing - Routes outgoing network requests through a set of external proxy servers to hide the origin IP.
- Traffic Masking Proxies - Routes exploit traffic through proxies and rotates headers to obscure the source of network activity.
- Network Traffic Obfuscators - Masks network traffic by routing requests through proxies and rotating user agents to evade detection.
- Pentesting Frameworks - Automated exploitation using Shodan and Metasploit modules.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
