# pocsuite-z

**Repository Path**: ilovecode2018/pocsuite-z

## Basic Information

- **Project Name**: pocsuite-z
- **Description**: No description available
- **Primary Language**: Unknown
- **License**: GPL-2.0
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2020-09-26
- **Last Updated**: 2024-07-23

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# pocsuite-z

[![Python 3.x](https://img.shields.io/badge/python-3.x-yellow.svg)](https://www.python.org/) [![License](https://img.shields.io/badge/license-GPLv2-red.svg)](https://raw.githubusercontent.com/knownsec/Pocsuite/master/docs/COPYING) [![Twitter](https://img.shields.io/badge/twitter-@z3r0yu-blue.svg)](https://twitter.com/zer0yu) [![build](https://api.travis-ci.org/knownsec/pocsuite3.svg)](https://travis-ci.org/knownsec/pocsuite3)

## Legal Disclaimer

Usage of pocsuite for attacking targets without prior mutual consent is illegal.  
pocsuite is for security testing purposes only

## 法律免责声明

未经事先双方同意，使用 pocsuite-z 攻击目标是非法的。  
pocsuite-z 仅用于安全测试目的

## Overview

pocsuite-z is an open-sourced remote vulnerability testing and proof-of-concept development framework developed by the [**Knownsec 404 Team**](http://www.knownsec.com/) ,and enhanced by z3r0yu.
It comes with a powerful proof-of-concept engine, many powerful features for the ultimate penetration testers and security researchers.

## Features

-   PoC scripts can running with `attack`,`verify`, `shell` mode in different way
-   Plugin ecosystem
-   Dynamic loading PoC script from any where (local file, redis , database, Seebug ...)
-   Load multi-target from any where (CIDR, local file, redis , database, Zoomeye, Shodan ...)
-   Results can be easily exported
-   Dynamic patch and hook requests
-   Both command line tool and python package import to use
-   IPV6 support
-   Global HTTP/HTTPS/SOCKS proxy support
-   Simple spider API for PoC script to use
-   Integrate with [Seebug](https://www.seebug.org) (for load PoC from Seebug website)
-   Integrate with [ZoomEye](https://www.zoomeye.org) (for load target from ZoomEye `Dork`)
-   Integrate with [Shodan](https://www.shodan.io) (for load target from Shodan `Dork`)
-   Integrate with [Ceye](http://ceye.io/) (for verify blind DNS and HTTP request)
-   Integrate with Fofa (for load target from Fofa `Dork`)
-   Friendly debug PoC scripts with IDEs
-   Integrate with [Google](https://www.google.com) (for load target from Google `Dork`)
-   Add PoCs from [some_pocsuite](https://github.com/hanc00l/some_pocsuite)
-   Integrate with Fofa crawler (for load target from Fofa `Dork`)
-   More ...

## Screenshots

### pocsuite3 console mode

[![asciicast](https://asciinema.org/a/219356.png)](https://asciinema.org/a/219356)

### pocsuite3 shell mode

[![asciicast](https://asciinema.org/a/203101.png)](https://asciinema.org/a/203101)

### pocsuite3 load PoC from Seebug

[![asciicast](https://asciinema.org/a/207350.png)](https://asciinema.org/a/207350)

### pocsuite3 load multi-target from ZoomEye

[![asciicast](https://asciinema.org/a/207349.png)](https://asciinema.org/a/207349)

### pocsuite3 load multi-target from Shodan

[![asciicast](https://asciinema.org/a/207349.png)](https://asciinema.org/a/207349)

## Requirements

-   Python 3.4+
-   Works on Linux, Windows, Mac OSX, BSD

## Installation

git clone it

```bash
git clone https://github.com/zer0yu/pocsuite-z.git
```

or click [here](https://github.com/zer0yu/pocsuite-z/archive/master.zip) to download the latest source zip package and extract

```bash
$ wget https://github.com/zer0yu/pocsuite-z/archive/master.zip
$ unzip master.zip
```

The latest version of this software is available from: https://github.com/zer0yu/pocsuite-z

## Documentation

Documentation is available in the [`docs`](./docs) directory.

## 常用命令

```
命令行模式下
	pocsuite -u http://example.com -r example.py -v 2 # 基础用法 v2开启详细信息

	pocsuite -u http://example.com -r example.py -v 2 --shell # shell反连模式，基础用法 v2开启详细信息

	pocsuite -r redis.py --dork service:redis --threads 20 # 从zoomeye搜索redis目标批量检测，线程设置为20

	python pocsuite3/cli.py -r pocsuite3/pocs/CVE-2020-5902.py --dork-google 'intitle:"BIG-IP" inurl:"tmui"' --thread 10 # 从google搜索目标并进行批量检测

	pocsuite -u http://example.com --plugins poc_from_pocs,html_report # 加载poc目录下所有poc,并将结果保存为html

	pocsuite -f batch.txt --plugins poc_from_pocs,html_report # 从文件中加载目标，并使用poc目录下poc批量扫描

	pocsuite -u 10.0.0.0/24 -r example.py --plugins target_from_cidr # 加载CIDR目标

	pocsuite -u http://example.com -r ecshop_rce.py --attack --command "whoami" # ecshop poc中实现了自定义命令`command`,可以从外部参数传递。

console模式
    poc-console
```

## How to Contribute

1. Check for open issues or open a fresh issue to start a discussion around a feature idea or a bug.
2. Fork [the repository](https://github.com/knownsec/pocsuite3) on GitHub to start making your changes to the **dev** branch (or branch off of it).
3. Write a test which shows that the bug was fixed or that the feature works as expected.
4. Send a pull request and bug the maintainer until it gets merged and published. Make sure to add yourself to [THANKS](./docs/THANKS.md).

## Links

-   [Contributors](./CONTRIBUTORS.md)
-   [Change Log](./CHANGELOG.md)
-   [Bug tracking](https://github.com/zer0yu/pocsuite-z/issues)
-   [Copyright](./COPYING)
-   [Pocsuite](http://pocsuite.org)
-   [Seebug](https://www.seebug.org)
-   [ZoomEye](https://www.zoomeye.org)
-   [Knownsec](https://www.knownsec.com)