Quick-Start

Vault, a Swiss army knife for hackers.

It can be used for performing various kind of vulberability scans and attack on the provided host.

Features

  • Scan website for the following vulnerabilities
    • XSS
    • LFI
  • Scanner
    • Port scanning : ACK, FIN, NULL, XMAS
    • IP scanning : Ping Sweep, ARP
    • SSL vulnerability scan
    • OS scan
    • Hash scanner : MD5, SHA1, SHA224, SHA256, SHA512
  • Crawling
    • Crawl a website and collect all the links
    • Crawl and scrape the website for images
  • Attacks
    • DDoS Attack
    • ARP Spoofer
    • De-authentication attack
    • Ping of death
    • MAC Flood attack
  • Finder
    • Find comments in source code
    • Find e-mails in source code
  • Others
    • Information Gathering
    • Clickjacking
    • jQuery version checking
    • Insecure cookie flags
    • Testing HTTP methods
    • Insecure headers
    • Header/banner grabbing
    • Brute force login through authorization headers
    • URL Fuzzer
    • WHOIS Lookup
    • Google Dork
    • Admin panel finder
    • Open redirect vulnerability
    • CMS Detection
    • Detect Honeypots
  • Utilities
    • Keylogger
    • MAC address changer

Requirements

Software required:

  • Python 3 or above
  • python-virtualenv

For Python dependencies, see requirements.txt.

Gitter

You can join the Vault community at the following Gitter chat room.