Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/lijiejie/EasyPen
EasyPen is a GUI program which helps pentesters do target discovery, vulnerability scan and exploitation
https://github.com/lijiejie/EasyPen
Last synced: 21 days ago
JSON representation
EasyPen is a GUI program which helps pentesters do target discovery, vulnerability scan and exploitation
- Host: GitHub
- URL: https://github.com/lijiejie/EasyPen
- Owner: lijiejie
- Created: 2022-08-22T12:54:41.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2022-10-19T08:47:02.000Z (about 2 years ago)
- Last Synced: 2024-11-13T16:58:19.273Z (29 days ago)
- Language: JavaScript
- Homepage:
- Size: 11 MB
- Stars: 609
- Watchers: 16
- Forks: 79
- Open Issues: 5
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
- awesome-hacking-lists - lijiejie/EasyPen - EasyPen is a GUI program which helps pentesters do target discovery, vulnerability scan and exploitation (JavaScript)
README
# EasyPen Alpha 1.0.7
> Do not use EasyPen for illegal purposes, this tool is for research only
[查看中文](https://github.com/lijiejie/EasyPen/blob/main/README_CN.md)
`EasyPen` is a GUI program which helps pentesters do target discovery, vulnerability scan and exploitation.
It has over 100 built-in scan scripts which covers most common vulnerabilities, you can easily write your own scan script and map the scan for thousands of targets.
**User Manual**： https://easypen.lijiejie.com/
### Change Log
* 2022-10-18: Bug Fix: Executable file path error when blank string appears in path.
* 2022-10-18: Bug Fix: Brute task access DNS log, weak passwords found not write to the result table as expected.
* 2022-09-21: Bug Fix: Terminate all child processes immediately after `STOP` click.
* 2022-09-16: Bug Fix: Targets input missing `is_http`.
* 2022-09-15: Bug Fix: DNS log monitor object overwrite, brute job shouldn't create dns log monitor.
* 2022-09-13: Bug fix: hydra plugin works with a hard code `timeout`.
* 2022-09-12: important bug fix, asyncio timeout failed to gather returned vulnerabilities.
### Install
Microsoft Windows users can download zipped file and run `EasyPen.exe` : https://github.com/lijiejie/EasyPen/releases
Users who are familiar with python can install via pip3
```
pip3 install -r requirements.txt
```
> At present this project is developed and tested under Python3.8, please use Python3.8 to run this app
**Ubuntu User**
```
apt install masscan nmap hydra medusa nfs-common ipmitool rsync -y
```
**CentOS User**
```
yum install masscan nmap nfs-utils ipmitool rsync -y
Install hydra: https://github.com/vanhauser-thc/thc-hydra
Or Install medusa: https://github.com/jmk-foofus/medusa
```
### Feathers
* **Discover**: Domain / IP / Port / Services discovery, build assert databases
* **Vulnerability Scan**：Single thread scan framework works with AsyncIO, with over 100 built-in plugins, can driven Hydra/Medusa/Ncrack to brute weak passwords
* **Incident Response**：Whenever a critical vulnerability was disclosed, based on the assert db created by the discover module and the scan framework, in most cases, users only need to write very few lines of code to implement the vulnerability check. After that you can map the scan script to thousands of targets and finish the scan in serveral minutes.
* **Exploitation**: Provides you some exploit tools
**Scan Panel Screenshot**
**Tools Panel Screenshot**
### Develop Plans
Alpha 1.0 was released, includes some basic modules. Please create issues if any bugs found.
* Adapt more DNSLog APIs，includes [Antenna漏洞验证平台](https://github.com/wuba/Antenna)
* Web fingerprints and live preview
* scan plugin profiles
* Support the execution of other open source projects' scan plugins: python / YAML
* Plugin live edit and debug
* Vulnerabilities one click recheck
* Brute function optimization
* Integrate with BBScan
* Better scan performance and algorithm
* Better code construction, more friendly for other users to contribute plugin & tools