{"id":15039058,"url":"https://github.com/owasp/nettacker","last_synced_at":"2026-10-18T23:46:26.652Z","repository":{"id":37245319,"uuid":"88980374","full_name":"OWASP/Nettacker","owner":"OWASP","description":"Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management","archived":false,"fork":false,"pushed_at":"2026-10-09T23:32:50.000Z","size":10163,"stargazers_count":5656,"open_issues_count":266,"forks_count":1210,"subscribers_count":117,"default_branch":"master","last_synced_at":"2026-10-13T00:32:52.858Z","etag":null,"topics":["automation","bruteforce","cve","hacking-tools","information-gathering","network-security","owasp","penetration-testing","penetration-testing-framework","pentesting","pentesting-tools","portscanner","python","recon","scanner","security","security-tools","vulnerability-management","vulnerability-scanner","vulnerability-scanners"],"latest_commit_sha":null,"homepage":"https://owasp.org/nettacker","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/OWASP.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"custom":"https://owasp.org/donate/?reponame=www-project-nettacker\u0026title=OWASP+Nettacker"}},"created_at":"2017-04-21T12:14:35.000Z","updated_at":"2026-10-12T17:02:40.000Z","dependencies_parsed_at":"2026-08-13T18:33:52.710Z","dependency_job_id":null,"html_url":"https://github.com/OWASP/Nettacker","commit_stats":{"total_commits":1973,"total_committers":59,"mean_commits":"33.440677966101696","dds":0.5022807906741004,"last_synced_commit":"1391affeb41c1b08e8486554522a698870b98660"},"previous_names":["zdresearch/owasp-nettacker"],"tags_count":13,"template":false,"template_full_name":null,"purl":"pkg:github/OWASP/Nettacker","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OWASP%2FNettacker","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OWASP%2FNettacker/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OWASP%2FNettacker/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OWASP%2FNettacker/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/OWASP","download_url":"https://codeload.github.com/OWASP/Nettacker/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OWASP%2FNettacker/sbom","scorecard":{"id":103880,"data":{"date":"2025-08-11","repo":{"name":"github.com/OWASP/Nettacker","commit":"a9f48be405935f1ef3f5f33e431e68836eaf573e"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.9,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci_cd.yml:317","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci_cd.yml:343","Warn: no topLevel permission defined: .github/workflows/ci_cd.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:285: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:288: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:291: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:297: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:300: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:322: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:328: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:254: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:257: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:263: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:266: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:348: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci_cd.yml:354: update your workflow using https://app.stepsecurity.io/secureworkflow/OWASP/Nettacker/ci_cd.yml/master?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:6","Warn: containerImage not pinned by hash: Dockerfile:31","Warn: pipCommand not pinned by hash: Dockerfile:8-12","Warn: pipCommand not pinned by hash: .github/workflows/ci_cd.yml:79","Warn: pipCommand not pinned by hash: .github/workflows/ci_cd.yml:102","Warn: pipCommand not pinned by hash: .github/workflows/ci_cd.yml:146","Info:   0 out of  19 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  10 third-party GitHubAction dependencies pinned","Info:   0 out of   2 containerImage dependencies pinned","Info:   2 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/ci_cd.yml:307"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Vulnerabilities","score":3,"reason":"7 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-27mf-ghqm-j3j8","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: GHSA-3ww4-gg4f-jr7f","Warn: Project is vulnerable to: PYSEC-2024-225 / GHSA-6vqw-3v5j-54x4","Warn: Project is vulnerable to: GHSA-9v9h-cgj8-h64p","Warn: Project is vulnerable to: GHSA-h4gh-qq45-vh27"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T10:43:20.620Z","repository_id":37245319,"created_at":"2025-08-15T10:43:20.620Z","updated_at":"2025-08-15T10:43:20.620Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":344872684,"owners_count":38343425,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-18T02:00:06.448Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["automation","bruteforce","cve","hacking-tools","information-gathering","network-security","owasp","penetration-testing","penetration-testing-framework","pentesting","pentesting-tools","portscanner","python","recon","scanner","security","security-tools","vulnerability-management","vulnerability-scanner","vulnerability-scanners"],"created_at":"2024-09-24T20:41:24.086Z","updated_at":"2026-10-18T23:46:26.646Z","avatar_url":"https://github.com/OWASP.png","language":"Python","funding_links":["https://owasp.org/donate/?reponame=www-project-nettacker\u0026title=OWASP+Nettacker"],"categories":[],"sub_categories":[],"readme":"OWASP Nettacker\n=========\n[![Build Status](https://github.com/OWASP/Nettacker/actions/workflows/ci_cd.yml/badge.svg?branch=master)](https://github.com/OWASP/Nettacker/actions/workflows/ci_cd.yml/badge.svg?branch=master)\n[![Apache License](https://img.shields.io/badge/License-Apache%20v2-green.svg)](https://github.com/OWASP/Nettacker/blob/master/LICENSE)\n[![Twitter](https://img.shields.io/badge/Twitter-@iotscan-blue.svg)](https://twitter.com/iotscan)\n![GitHub contributors](https://img.shields.io/github/contributors/OWASP/Nettacker)\n[![Documentation Status](https://readthedocs.org/projects/nettacker/badge/?version=latest)](https://nettacker.readthedocs.io/en/latest/?badge=latest)\n[![Ask DeepWiki](https://deepwiki.com/badge.svg)](https://deepwiki.com/OWASP/Nettacker)\n[![repo size ](https://img.shields.io/github/repo-size/OWASP/Nettacker)](https://github.com/OWASP/Nettacker)\n[![Docker Pulls](https://img.shields.io/docker/pulls/owasp/nettacker)](https://hub.docker.com/r/owasp/nettacker)\n\n\n\u003cimg src=\"https://raw.githubusercontent.com/OWASP/Nettacker/master/nettacker/web/static/img/owasp-nettacker.png\" width=\"200\"\u003e\u003cimg src=\"https://raw.githubusercontent.com/OWASP/Nettacker/master/nettacker/web/static/img/owasp.png\" width=\"500\"\u003e\n\n\n**DISCLAIMER**\n\n* ***THIS SOFTWARE WAS CREATED FOR AUTOMATED PENETRATION TESTING AND INFORMATION GATHERING. YOU MUST USE THIS SOFTWARE IN A RESPONSIBLE AND ETHICAL MANNER. DO NOT TARGET SYSTEMS OR APPLICATIONS WITHOUT OBTAINING PERMISSIONS OR CONSENT FROM THE SYSTEM OWNERS OR ADMINISTRATORS. CONTRIBUTORS WILL NOT BE RESPONSIBLE FOR ANY ILLEGAL USAGE.***\n\n![2018-01-19_0-45-07](https://user-images.githubusercontent.com/7676267/35123376-283d5a3e-fcb7-11e7-9b1c-92b78ed4fecc.gif)\n\nOWASP Nettacker is an open-source, Python-based automated penetration testing and information-gathering framework designed to help cyber security professionals and ethical hackers perform reconnaissance, vulnerability assessments, and network security audits efficiently. Nettacker automates tasks like port scanning, service detection, subdomain enumeration, network mapping, vulnerability scanning, credential brute-force testing making it a powerful tool for identifying weaknesses in networks, web applications, IoT devices and APIs.\n\n### Key Features\n\n- **Modular architecture** - Each task — like port scanning, directory discovery, subdomain enumeration, vulnerability checks, or credential brute-forcing - is implemented as its own module, giving you control over what runs.\n- **Multi-protocol \u0026 multithreaded scanning** - Supports HTTP/HTTPS, FTP, SSH, SMB, SMTP, ICMP, TELNET, XML-RPC, and can run scans in parallel for speed.\n- **Comprehensive output** - Export reports in HTML, JSON, CSV, and plain text.\n- **Built-in database \u0026 drift detection** - Stores past scans in the database for easy search and comparison with current results: useful to detect new hosts, open ports, or vulnerabilities in CI/CD pipelines.\n- **CLI, REST API \u0026 Web UI** - Offers both programmatic integration and a user-friendly web interface for defining scans and viewing results.\n- **Evasion techniques** - Enables configurable delays, proxy support, and randomized user-agents to reduce detection by firewalls or IDS systems.\n- **Flexible targets** - Accepts single IPv4s, IP ranges, CIDR blocks, domain names, and full HTTP/HTTPS URLs. Targets can be mixed in a single command or loaded from a file using the `-l/--targets-list` flag. \n\n### Use Cases\n\n- **Penetration Testing**  \n  Automate reconnaissance, misconfiguration checks, service discovery, and vulnerability scanning to support efficient and repeatable penetration testing workflows.  \n\n- **Recon \u0026 Vulnerability Assessment**  \n  Map live hosts, open ports, services, default credentials, and directories, then perform credential brute-forcing or fuzzing using built-in or custom wordlists.\n  \n- **Attack Surface Mapping**  \n  Discover exposed hosts, ports, subdomains, and services quickly using built-in enumeration modules—ideal for both internal and external assets.  \n\n- **Bug Bounty Recon**  \n  Automate and scale common reconnaissance tasks like subdomain enumeration, directory brute-forcing, and default credential checks to speed up finding targets.  \n\n- **Network Vulnerability Scanning**  \n  Efficiently scan IPs, IP ranges, or entire CIDR blocks or all subdomains of the organisation in parallel using a modular, multithreaded approach for large-scale network assessments.  \n\n- **Shadow IT \u0026 Asset Discovery**  \n  Use historical scan data and drift detection to uncover unmanaged or forgotten hosts, open ports/services, and subdomains appearing over time.  \n\n- **CI/CD \u0026 Compliance Monitoring**  \n  Integrate Nettacker into pipelines to track infrastructure changes and detect new vulnerabilities via stored scan history and comparison features.  \n\n### Links\n\n* OWASP Nettacker Project Home Page: https://owasp.org/nettacker\n* Documentation: https://nettacker.readthedocs.io\n* Slack: [#project-nettacker](https://owasp.slack.com/archives/CQZGG24FQ) on https://owasp.slack.com \n* Installation: https://nettacker.readthedocs.io/en/latest/Installation\n* Usage: https://nettacker.readthedocs.io/en/latest/Usage\n* GitHub repo: https://github.com/OWASP/Nettacker\n* Docker Image: https://hub.docker.com/r/owasp/nettacker\n* How to use the Dockerfile: https://nettacker.readthedocs.io/en/latest/Installation/#install-nettacker-using-docker\n* OpenHub: https://www.openhub.net/p/OWASP-Nettacker\n* **Donate**: https://owasp.org/donate/?reponame=www-project-nettacker\u0026title=OWASP+Nettacker\n* **Read More**: https://www.secologist.com/open-source-projects\n\n____________\nQuick Setup \u0026 Run\n============\n### CLI (Docker)\n```bash\n\n# Basic port scan on a single IP address:\n$ docker run owasp/nettacker -i 192.168.0.1 -m port_scan\n# Scan the entire Class C network for any devices with port 22 open:\n$ docker run owasp/nettacker -i 192.168.0.0/24 -m port_scan -g 22\n# Scan all subdomains of 'owasp.org' for http/https services and return HTTP status code\n$ docker run owasp/nettacker -i owasp.org -d -s -m http_status_scan\n# Display Help\n$ docker run owasp/nettacker --help\n\n\n```\n### Web UI (Docker)\n\n```bash\n$ docker-compose up \n```\n* Use the API Key displayed in the CLI to login to the Web GUI\n* Web GUI is accessible from your (https://localhost:5000) or https://nettacker-api.z3r0d4y.com:5000/ (pointed to your localhost)\n* The local database is `.nettacker/data/nettacker.db` (sqlite).\n* Default results path is `.nettacker/data/results`\n* `docker-compose` will share your nettacker folder, so you will not lose any data after `docker-compose down`\n* To see the API key in you can also run `docker logs nettacker_nettacker`.\n* More details and install without docker https://nettacker.readthedocs.io/en/latest/Installation\n_____________\nThanks to our awesome contributors!\n============\n\nOWASP Nettacker is an open-source project, built on the principles of collaboration and shared knowledge. The vibrant OWASP community contributes to its development, ensuring that the tool remains up-to-date, adaptable, and aligned with the latest security practices. Thanks to all our awesome contributors! 🚀\n\n![Awesome Contributors](https://contrib.rocks/image?repo=OWASP/Nettacker)\n\n## Adopters\n\nWe’re grateful to the organizations, community projects, and individuals who adopt and rely on OWASP Nettacker for their security workflows.\n\nIf you’re using OWASP Nettacker in your organization or project, we’d love to hear from you! Feel free to add your details to the [ADOPTERS.md](ADOPTERS.md) file by submitting a pull request or reach out to us via GitHub issues. Let’s showcase how Nettacker is making a difference in the security community!\n\n See [ADOPTERS.md](ADOPTERS.md) for details.\n\n_____________\n\n## ***Google Summer of Code (GSoC) Project***\n*\t☀️ OWASP Nettacker Project is participating in the Google Summer of Code Initiative \n* 🙏 Thanks to Google Summer of Code Initiative and all the students who contributed to this project during their summer breaks: \n\n\n\u003ca href=\"https://summerofcode.withgoogle.com\"\u003e\u003cimg src=\"https://betanews.com/wp-content/uploads/2016/03/vertical-GSoC-logo.jpg\" width=\"200\"\u003e\u003c/img\u003e\u003c/a\u003e\n\n_____________\n\n## Supporters\n\nOWASP Nettacker is supported by [Sorena AI](https://www.sorena.io/), a compliance and GRC platform that helps security teams streamline assessments, evidence collection, risk management, and regulatory workflows.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fowasp%2Fnettacker","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fowasp%2Fnettacker","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fowasp%2Fnettacker/lists"}