vMass - vMass Bot :hook: Vulnerability Scanner & Auto Expl

项目说明

vMass Bot :hook: FREE 1.2

<p align="center">
<img src=" width="850">
</p>
<p align="center">
<a href="#requirements-wrench">Requirements</a> ◦
<a href="#installation-package">Installation</a> ◦
<a href="#usage--rescue_worker_helmet">Usage</a> ◦
<a href="#contact--speech_balloon">Contact</a>
</p>
<br>
<b>vMass Bot</b> automates the exploitation of remote hosts by trying to find en files (.env) in the target hosts and extract tools and info insde,
then the bot detects the targets host CMS and tries to auto-exploit and upload shell payload using the vMass set <b>( 108 exploits in the current 1.2, check the full list in our <a href="

No target list ? No worries, <b>vMass Bot</b> can generate hosts lists from IP ranges, URL list, dotenv low profile dorks and scrapes from (bing, duckduckgo, ..) or you can use IP ranges from hosting pro for best hit rate while scanning, then generated lists can be checked using the bot to eleminate invalid/dead hosts.

Extracted Tools, can be filtered and tested to only keep working ones (test smtp delivery and twilio api balance), the bot can also use wp hosts with phpmyadmin access to perform auto upload (admin takeover) if the CMS Exploits failed, working tools can be delivered right to your s from generating hosts and scanning to deli the results to Bot <a href="/#">Usage</a>).

Requirements :wrench:

Perl v5.x+ ( For Windows, get <a href=" Perl</a> )

RDP/VPS ( <b>Optional</b> )

Installation :package:

1- Clone vMass Bot

2- Install required Perl Modules -- IMPORTANT
Install Modules with Bash Script

<b>OR</b>
Install Perl modules manually

3- Launch vMass Bot

Usage :rescue_worker_helmet:

<p align="center">
<img src=" width="800">
</p>
<p align="center">
<b>vMass FREE only includes Features with :green_square:</b>
</p>

| Command | Description |
| :---: | --- |
| 1 | :green_square: Generate target hosts from given IP Range, you can use more as many ranges as you like (ex: 100.20.0.0/14 ) |
| 2 | :yellow_square: Generate target hosts from gi or using the bot en, you can specify target hosts region, TLDs and search engines |
| 3 | :green_square: Generate target hosts from gi List, PS: URL Lists must me domain.com format only without www or https |
| 4 | :green_square: Generate target hosts from provided hosting ip range, range is picked randomly, you can change range before starting |
| 5 | :green_square: Check the targets hosts to filter Li IPS from dead ones. |
| 6 | :green_square: Scan the target hosts for possible .en, the bot will test all host directories and saves host if env is found |
| 7 | :yellow_square: Scan the target hosts for .env and perform auto exploit based on host CMS to upload shell payload (108 exploits) |
| 8 | :yellow_square: Under Construction... :ninja: |
| 9 | :green_square: Extract tools from hosts where env file is found based on tool type |
| 10| :yellow_square: test extracted SMTPs, an email input is required, if the smtp delivers, the smtp info will be in the email body |
| 11| :yellow_square: test extracted TWILIOs APIs and balance |
| 12| :yellow_square: try to find phpmyadmin login page path, and perform admin takeo to upload shell in Wordpress CMS hosts |
| 13| :yellow_square: Transfer all tools to a private |
|1337| :yellow_square: performs all the steps above one after another, you just configure the bot, start it and results will be delivered to your
<br>

Contact :speech_balloon:

Got a Question ?
send me DM on <a href="">

Disclaimer :bangbang:

vMass Bot was created for educational purposes only, Any actions and/or acti done using this bot is solely your responsibility.

:ringed_planet: Join Our Channel To be Notified of Updates and New Releases :ringed_planet:

<br>
<p align="center">
<a href="
<img src="
</a>
</p>

项目信息

开发语言：Perl

Star 数：214

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕vMass Bot :hook: Vulnerability Scanner & Auto Exploiter Tool Written in Perl.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。