9/18/18

Pure Blood v2.0 – A Penetration Testing Framework Created For Hackers / Pentester / Bug Hunter


A Penetration Testing Framework created for Hackers / Pentester / Bug Hunter.
Web Pentest / Information Gathering:

  • Banner Grab
  • Whois
  • Traceroute
  • DNS Record
  • Reverse DNS Lookup
  • Zone Transfer Lookup
  • Port Scan
  • Admin Panel Scan
  • Subdomain Scan
  • CMS Identify
  • Reverse IP Lookup
  • Subnet Lookup
  • Extract Page Links
  • Directory Fuzz (NEW)
  • File Fuzz (NEW)
  • Shodan Search (NEW)
  • Shodan Host Lookup (NEW)

Web Application Attack: (NEW) :

  • WordPress
    - WPScan
    - WPScan Bruteforce
    - WordPress Plugin Vulnerability Checker Features: // I will add more soon.
    - WordPress Woocommerce – Directory Craversal
    - WordPress Plugin Booking Calendar 3.0.0 – SQL Injection / Cross-Site Scripting
    - WordPress Plugin WP with Spritz 1.0 – Remote File Inclusion
    - WordPress Plugin Events Calendar – ‘event_id’ SQL Injection
  • Auto SQL Injection Features: - Union Based
    - (Error Output = False) Detection
    - Tested on 100+ Websites

Generator:

  • Deface Page
  • Password Generator // NEW
  • Text To Hash //NEW
Installation

  • $ git clone https://github.com/cr4shcod3/pureblood
  • $ cd pureblood
  • $ pip install -r requirements.txt


DEMO


Web Application Attack


Build With

  • Colorama
  • Requests
  • Python-whois
  • Dnspython
  • BeautifulSoup
  • Shodan