AutoSploit - Automated Mass Exploiter

项目说明

<center><img src="
<br>
As the name might suggest AutoSploit attempts to automate the exploitation of remote hosts. Targets can be collected automatically through Shodan, Censys or Zoomeye. But options to add your custom targets and host lists have been included as well. The a Metasploit modules have been selected to facilitate Remote 代码 Execution and to attempt to gain Reverse TCP Shells and/or Meterpreter sessions. Workspace, local host and local port for MSF facilitated back connections are configured by filling out the dialog that comes up before the exploit component is started

_Operational Security Consideration:_

Receiving back connections on your local machine might not be the best idea from an OPSEC standpoint. Instead consider running this 工具 from a VPS that has all the dependencies required, a.

The new of AutoSploit has a feature that allows you to set a proxy before you connect and a custom user-agent.

Helpful links

- Usage
- Installing
- Dependencies
- User Manual
- Extensi breakdown
- Screenshots
- Reporting bugs/ideas
- De guidelines
- Shoutouts
- De
- Discord server
- README translations

Installation

Installing AutoSploit is very simple, you can find the latest stable release here. You can also download the master branch as a zip or tarball or follow one of the below methods;

##### Docker Compose
Using Docker Compose is by far the easiest way to get AutoSploit up and running without too much of a hassle.

##### Docker
Just using Docker.

Dev team contributor Khast3x recently impro operations as well as add more details to the README.md in the Docker subdirectory. For more information on deploying AutoSploit with Docker please be sure to click here

##### Cloning
On any Linux system the following should work;

AutoSploit is compatible with macOS, however, you have to be inside a en for it to run successfully. In order to accomplish this employ/perform the below operations via the terminal or in the form of a shell script.

Usage

Starting the program with python autosploit.py will open an AutoSploit terminal session. The options for which are as follows.

Choosing option 2 will prompt you for a platform specific search query. Enter IIS or Apache in example and choose a search 引擎. After doing so the collected hosts will be saved to be used in the Exploit component.

As of 2.0 AutoSploit can be started with a number of command line arguments/flags as well. Type python autosploit.py -h to display all the options a to you. I' the options below as well for reference.

Dependencies

AutoSploit depends on the following Python2.7 modules.

Should you find you do not ha installed get them with pip like so.

or

Since the program invokes functionality from the Metasploit 框架 you need to have this installed also. Get it from Rapid7 by clicking here.

Acknowledgements

Special thanks to Ekultek without whoms contributions to the project, the new would have been a lot less spectacular.

Thanks to Khast3x for setting up Docker support.

Last but certainly not least. Thanks to all who ha Pull Requests, bug reports, useful and producti in general.

Acti

If you would like to contribute to the de of this project please be sure to read CONTRIBUTING.md as it contains our contribution guidelines.

Please, also, be sure to read our contribution standards before sending pull requests

If you need some help understanding the 代码, or want to chat with some other AutoSploit community members, feel free to join our Discord 服务端.

Note

If you happen to encounter a bug please feel free to Open a Ticket.

Thanks in advance.

Translations

- FR
- ZH
- DE

项目信息

开发语言：Python

Star 数：5255

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Automated Mass Exploiter展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。