OWASP Nettacker
OWASP Nettacker is an automated penetration testing framework designed to help cyber security professionals and ethical hackers perform reconnaissance, vulnerability assessments, and network security audits efficiently.
Nettacker automates information gathering, vulnerability scanning, and credential brute forcing tasks, making it a powerful tool for identifying weaknesses in networks, web applications, IoT devices and APIs.
OWASP Nettacker is an open-source software written in Python language. OWASP Nettacker uses YAML files to define modules in a structured and human-readable format.
About OWASP Nettacker
Documentation
• Installation • Usage • Documentation
Code Repository
Docker Images
• OWASP Nettacker Docker Images on DockerHub
Contributing
Overview
OWASP Nettacker project was created to automate information gathering, vulnerability scanning and in general to aid penetration testing engagements. Nettacker is able to run various scans using a variety of methods and generate scan reports(in HTML/TXT/JSON/CSV format) for applications and networks, including discovering open ports, services, bugs, vulnerabilities, misconfigurations, default credentials, subdomains, etc. Nettacker can be run as a command-line utility (including running as a Docker container), API, Web GUI mode
OWASP Nettacker's modular architecture is one of its core strengths, allowing users to perform specific tasks by leveraging a range of pre-built and customizable modules.
By leveraging a modular framework, Nettacker supports multiple protocols and scanning methods, making it highly adaptable to various security testing scenarios.
OWASP Nettacker is written in 100% Python and does not rely on launching any external tools.
OWASP Nettacker can also help you find instances of critically vulnerable MOVEit Transfer, Citrix Netscaler, Ivanti ICS/EPMM/vTM/CSA services and other CISA KEV vulnerabilities in your network as well as help build your asset inventory.
Quick Demo - CLI
Quick Demo - Web UI
Project Resources
Slack