search

v3n0m-Scanner / V3n0M-Scanner

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
GNU General Public License v3.0
1.46k stars 407 forks source link

OSCP friendly #221

Closed Cyb3rC3lt closed 2 years ago

Cyb3rC3lt commented 2 years ago

Apologies this isn't an issue but I didn't know where to ask. Is this tool OSCP friendly so doesn't auto exploit? I know Nikto is used a lot on the exam but maybe this is better? Thanks

kattstof commented 2 years ago

it doesn't auto exploit but i would go with nikto mostly because i don't have time to re-add some features like proxy support (currently broken) an add some newer exploit detections.

vittring commented 2 years ago

There was an auto exploit feature for the XSS/RFI bit but Nova removed it and it's been edited heavily to ensure safety of users. It no longer fires exploits unless you call Hello buttons on webpages exploits. It might, however, draw attention of astute web-admins and sysadmins watching the logs. But it's not malicious and doesn't do anything you don't tell it to do.