killshot - A Penetration Testing Framework, Information gathe

项目说明

This project is no longer maintained !
# KILLSHOT
A Penetration Testing Framework, Information gathering tool & Website Scanner

Why KillShot?

You can use this tool to spider your website, gather important information, and automate data collection using tools such as WhatWeb, Host, Traceroute, Dig, Fierce, and WafW00f. It also allows you to identify the CMS and find in your website using a CMS Exploit Scanner and a Web Application Scanner.

Additionally, KillShot can automatically perform multiple types of scans using Nmap and Unicorn. With this tool, you can also generate simple PHP backdoors, upload them manually, and connect to the target using KillShot.

This tool also includes a simple Ruby fuzzer tested on .exe, as well as a Linux log-cleaning script to modify login path content. The spider feature helps you find website parameters and scan for XSS and SQL injection .

!killshot-logo_v1

# Help option

!help

Use Shodan By targ option

CreateAccount Here Register and get Your aip Shodan AIP And Add your shodan AIP to aip.txt
< only your aip should be show in the aip.txt >
Use targ To search about Targets in shodan databases

!search

Use targ To scan Ip of servers fast with shodan

!scan

Menu Site

{0} Spider
{1} Web technologie
{2} WebApp
{3} Port Scanner
{4} CMS Scanner
{5} Fuzzers
{6} Cms Exploit Scanner
{7} Backdoor Generation
{8} Linux Log Clear

WebApp

{1} Xss scanner
{2} Sql Scanner
{3} Tomcat RCE

Port Scanner

[0] Nmap Scan
[1] Unicorn Scan
Nmap Scan
[2] Nmap Os Scan
[3] Nmap TCP Scan
[4] Nmap UDB Scan
[5] Nmap All scan
[6] Nmap Http Option Scan
[7] Nmap Li In Network
Unicorn Scan
[8] Services OS
[9] TCP SYN Scan on a whole network
[01] UDP scan on the whole network

Backdoor Generation

{1} Generate Shell
{2} Connect Shell

USAGE

1 ----- Help Command
[site] MAKE YOUR TARGET
[help] show this MESSAGE
[exit] show this MESSAGE
2 ------ Site command
Put your target www.example.com
without the http

Linux Setup

git clone
cd killshot
ruby setup.rb (if setup show any error just try to install the gems/tool manual )
ruby killshot.rb

Windows Setup

Download ruby for windows ==>
Download Cmder here ==>
Download Curl For 64/32 ==>
Download nmap ==>
Enjoy !
# LAST_Update v 1.5
[+] Fix setup error
[+] Fix sql injection detect error
[+] Add Typo3 Scanner (+brute force)
[+] Detect Of the MX and NS
Easy and fast use of killshot

Use KillShot To Detect and Scan cms (Joomla && Wordpress) And Scan For Xss And Sql

Please Any one who find any error/bugs in any code contact me also if you want to add some codes
or to upgrade some codes in killshot just contact me
<trying to make hacking better>

# references
are taken from

1)
2)
3)

项目信息

开发语言：Ruby

Star 数：787

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。