x3omdax/penbox

PenBox - A Penetration Testing Framework - The Tool With All The Tools , The Hacker's Repo

PenBox – A Penetration Testing Framework

A Penetration Testing Framework , The Hacker’s Repo our hope is in the last version we will have evry script that a hacker needs #Information Gathering :

• nmap
• Setoolkit
• Port Scanning
• Host To IP
• wordpress user enumeration
• CMS scanner
• XSStracer - checks remote web servers for Clickjacking, Cross-Frame Scripting, Cross-Site Tracing and Host Header Injection
• Doork - Google Dorks Passive Vulnerability Auditor
• Scan A server's Users

Password Attacks :

• Cupp
• Ncrack
• AutoBrowser Screenshot

Wireless Testing :

• reaver
• pixiewps
• Bluetooth Honeypot GUI Framework

Exploitation Tools :

• Venom
• sqlmap
• Shellnoob
• commix
• FTP Auto Bypass
• jboss-autopwn
• Blind SQL Automatic Injection And Exploit
• Bruteforce the Android Passcode given the hash and salt
• Joomla, Mambo, PHP-Nuke, and XOOPS CMS SQL injection Scanner
• cms Few
• BLACKBOx
• Liffy

Sniffing & Spoofing :

• Setoolkit
• SSLtrip
• pyPISHER
• SMTP Mailer

Web Hacking :

• Drupal Hacking
• Inurlbr
• Wordpress & Joomla Scanner
• Gravity Form Scanner
• File Upload Checker
• Wordpress Exploit Scanner
• Wordpress Plugins Scanner
• Shell and Directory Finder
• Joomla! 1.5 - 3.4.5 remote code execution
• Vbulletin 5.X remote code execution
• BruteX - Automatically brute force all services running on a target
• Arachni - Web Application Security Scanner Framework
• Sub-domain Scanning
• Wordpress Scanning
• Wordpress Username Enumeration
• Wordpress Backup Grabbing
• Sensitive File Detection
• Same-Site Scripting Scanning
• Click Jacking Detection
• Powerful XSS vulnerability scanning
• SQL Injection vulnerability scanning

#Private Tools

• Get all websites
• Get joomla websites
• Get wordpress websites
• Find control panel
• Find zip files
• Find upload files
• Get server users
• Scan from SQL injection
• Scan ports (range of ports)
• Scan ports (common ports)
• Get server banner
• Bypass Cloudflare

#Post Exploitation

• Shell Checker
• POET
• Weeman - Phishing Framework
• Insecure Web Interface
• Insufficient Authentication/Authorization
• Insecure Network Services
• Lack of Transport Encryption
• Privacy Concerns
• Insecure Cloud Interface
• Insecure Mobile Interface
• Insufficient Security Configurability
• Insecure Software/Firmware
• Poor Physical Security
• Radium-Keylogger - Python keylogger with multiple features

#Recon

• Sniper

#Smartphones Penetration

• Attach Framework to a Deployed Agent/Create Agent
• Send Commands to an Agent
• View Information Gathered
• Attach Framework to a Mobile Modem
• Run a remote attack
• Run a social engineering or client side attack
• Compile code to run on mobile devices
• Install Stuff
• Use Drozer
• Setup API
• Bruteforce the Android Passcode given the hash and salt

#Others

• QrlJacking-Framework
• Sniffles - Packet Capture Generator for IDS and Regular Expression Evaluation #Installation git clone https://github.com/x3omdax/PenBox.git

penbox's Issues

Installation pixiewps...

...    
Enter Your Choice:3
1 : reaver 
2 : pixiewps
99: Back To The Main Menu
Select from the menu:2
Pixiewps is a tool written in C used to bruteforce offline the WPS pin exploiting the low or non-existing entropy of some Access Points, the so-called "pixie dust attack" discovered by Dominique Bongard in summer 2014. It is meant for educational purposes only

Continue ? Y/N : y
Cloning into 'pixiewps'...
remote: Counting objects: 245, done.
remote: Compressing objects: 100% (4/4), done.
remote: Total 245 (delta 0), reused 0 (delta 0), pack-reused 241
Receiving objects: 100% (245/245), 114.61 KiB | 86.00 KiB/s, done.
Resolving deltas: 100% (132/132), done.
Checking connectivity... done.
make: *** No targets specified and no makefile found.  Stop.
make: *** No rule to make target `install'.  Stop.

Fix

Replace

os.system("git clone https://github.com/wiire/pixiewps.git")
os.system(" cd pixiewps/src & make ")
os.system(" cd pixiewps/src & sudo make install")

To

os.system("git clone https://github.com/wiire/pixiewps.git")
os.system(" cd pixiewps/src && make ")
os.system(" cd pixiewps/src && sudo make install")

query yes / no

instead of this part of code i want a yes or no question and answer :) any solutions ?
print("1 to accept / 0 to decline")
choicecupp = input("1/0 :")
choicecupp= int(choicecupp)
if choicecupp ==1:
os.system("git clone https://github.com/Mebus/cupp.git");os.system("cd cupp")
elif choicecupp ==0:

License

You should consider adding a license to the project and removing your names from the code source or adding them using a good way → http://choosealicense.com/

Exporting this project to a milestone project

Hi.
If you want i can contribute to export this project to support Python3 and imrpove it's code in order to be more portable and modular. Also we can crate a GUI for it (Gtk3+ or maybe Qt ?).

Also we can work together to extend it's libraries and payloads in order to have the most complete pentesting tool.
I'll fork this project and i'll wait your response.
Greetings.

import: command not found

./penbox.py: line 6: import: command not found
./penbox.py: line 7: import: command not found
./penbox.py: line 8: import: command not found
./penbox.py: line 9: import: command not found
./penbox.py: line 10: import: command not found
./penbox.py: line 11: import: command not found
./penbox.py: line 12: import: command not found
./penbox.py: line 13: import: command not found
./penbox.py: line 14: import: command not found
./penbox.py: line 15: import: command not found
./penbox.py: line 16: import: command not found
./penbox.py: line 17: import: command not found
./penbox.py: line 18: import: command not found
./penbox.py: line 19: import: command not found
./penbox.py: line 20: import: command not found
./penbox.py: line 21: import: command not found
from: can't read /var/mail/getpass
from: can't read /var/mail/commands
from: can't read /var/mail/sys
from: can't read /var/mail/platform
from: can't read /var/mail/urlparse
from: can't read /var/mail/xml.dom
from: can't read /var/mail/optparse
from: can't read /var/mail/time
./penbox.py: line 32: directories: command not found
./penbox.py: line 33: shells: command not found
./penbox.py: line 34: upload: command not found
./penbox.py: line 35: syntax error near unexpected token (' ./penbox.py: line 35:yes = set(['yes','y', 'ye', 'Y'])'

how to solve this problem? thank in advance
how to s

Will not run any tools

Hi mate. For some reason everything just does this when I run it.

Enter Your Choice:4
1 : Venom
2 : sqlmap
3 : Shellnoob
4 : commix
5 : FTP Auto Bypass
6 : jboss-autopwn
7 : Blind SQL Automatic Injection And Exploit
8 : Bruteforce the Android Passcode given the hash and salt
9 : Joomla, Mambo, PHP-Nuke, and XOOPS CMS SQL injection Scanner
99 : Go Back To Main Menu
Select from the menu:4
Automated All-in-One OS Command Injection and Exploitation Tool.
usage : python commix.py --help
Continue: y/n :y
fatal: destination path 'commix' already exists and is not an empty directory.
python: can't open file 'commix.py': [Errno 2] No such file or directory

  ______                 ______
 (_____ \               (____  \
  _____) )  ____  ____   ____)  )  ___   _   _
 |  ____/  / _  )|  _ \ |  __  (  / _ \ ( \ / )
 | |      ( (/ / | | | || |__)  )| |_| | ) X (
 |_|       \____)|_| |_||______/  \___/ (_/ \_) V2.2
                         A Penetration Testing Framework

Version 1.4 not working ?

Hello,
Every time I want to open V1.4 it say callback error etc .... Could u maybe take a look ?

This project is not maintained any more

Maybe it would be worthy to close it in order to prevent confusion

AttributeError: TNscan instance has no attribute 'portScanner'

Hi X3, great tool, mate - I'm just having a play about but seem to have an issue here..

4. Find control panel
5. Find zip files
6. Find upload files
7. Get server users
8. Scan from SQL injection
9. Scan ports (range of ports)
10. Scan ports (common ports)
11. Get server banner
12. Bypass Cloudflare
13. Exit

Enter choice -> 9
Enter range of ports, (ex : 1-1000) -> 21-443
Traceback (most recent call last):
File "penbox.py", line 1477, in
menu()
File "penbox.py", line 87, in menu
info()
File "penbox.py", line 638, in info
menu()
File "penbox.py", line 93, in menu
exp()
File "penbox.py", line 734, in exp
menu()
File "penbox.py", line 97, in menu
webhack()
File "penbox.py", line 322, in webhack
menu()
File "penbox.py", line 97, in menu
webhack()
File "penbox.py", line 322, in webhack
menu()
File "penbox.py", line 97, in menu
webhack()
File "penbox.py", line 322, in webhack
menu()
File "penbox.py", line 99, in menu
tnn()
File "penbox.py", line 1299, in init
TNscan(aaa)
File "penbox.py", line 824, in init
self.portScanner(1, ran)
AttributeError: TNscan instance has no attribute 'portScanner'

Mispellings

There are mispellings in the script.

Doesnt seem to load for me, i just get a funny mouse cursor

i get this and it just sits there,

http://pix.toile-libre.org/upload/original/1471890544.jpg