Hackers of India

OWASP Nettacker: Automated Penetration Testing Framework

By Sri Harsha Gajavalli , Ali Razmjoo Qalaei , Ehsan Nezami on 28 Mar 2019 @ Blackhat : Arsenal
💻 Source Code 🔗 Link
network-pentesting vulnerability-assessment firewall ids ips owasp
Focus Areas: Security Operations & Defense , Application Security , Network Security , Penetration Testing , Vulnerability Management , Web Application Security
This Tool Demo covers following tools where the speaker has contributed or authored
NETTACKER

Abstract

The OWASP Nettacker project was created to automate information gathering, vulnerability scanning, and eventually generating a report for networks, including services, bugs, vulnerabilities, misconfigurations, and other information. This software will utilize TCP SYN, ACK, ICMP and many other protocols in order to detect and bypass Firewall/IDS/IPS devices. By leveraging a unique method in OWASP Nettacker for discovering protected services and devices such as SCADA, it would make a competitive edge compared to other scanners, making it one of the best.