Linux command
nettacker 命令
文件
复制后可按需替换文件名、目录或参数。
常用示例
Scan target for vulnerabilities
nettacker -i [target.com]
Scan with specific modules
nettacker -i [target] -m [ssh_brute,ftp_brute]
Scan targets from file
nettacker -l [targets.txt]
Scan with all modules
nettacker -i [target] -m all
Scan with specific ports
nettacker -i [target] -p [22,80,443]
Save results to file
nettacker -i [target] -o [report.html]
Set threads and timeout
nettacker -i [target] -t [10] --timeout [5]
说明
nettacker is an automated penetration testing framework. It scans for vulnerabilities, performs brute force attacks, and identifies misconfigurations. Modules target specific vulnerabilities or services: SSH brute force, FTP anonymous access, web vulnerabilities, subdomain enumeration, and more. The framework supports network scanning, service detection, and exploitation in an automated workflow. Results are collected and reported. Output formats include HTML reports with graphs, JSON for processing, and text. The D3 graph visualization shows attack paths and findings. An API server enables integration with other tools and automation frameworks. The web interface provides point-and-click scanning. This tool is designed for authorized security assessments and penetration testing.
参数
- -i _TARGET_
- Target (IP, hostname, CIDR).
- -l _FILE_
- Target list file.
- -m _MODULES_
- Modules to run (comma-separated).
- -p _PORTS_
- Ports to scan.
- -o _FILE_
- Output file.
- -t _N_
- Number of threads.
- --timeout _SEC_
- Timeout in seconds.
- -u _USER_
- Username for brute force.
- -U _FILE_
- Username list file.
- -P _FILE_
- Password list file.
- --method _METHOD_
- Scan method.
- --graph _TYPE_
- Generate graph (d3_tree, etc.).
- --api
- Run API server.
FAQ
What is the nettacker command used for?
nettacker is an automated penetration testing framework. It scans for vulnerabilities, performs brute force attacks, and identifies misconfigurations. Modules target specific vulnerabilities or services: SSH brute force, FTP anonymous access, web vulnerabilities, subdomain enumeration, and more. The framework supports network scanning, service detection, and exploitation in an automated workflow. Results are collected and reported. Output formats include HTML reports with graphs, JSON for processing, and text. The D3 graph visualization shows attack paths and findings. An API server enables integration with other tools and automation frameworks. The web interface provides point-and-click scanning. This tool is designed for authorized security assessments and penetration testing.
How do I run a basic nettacker example?
Run `nettacker -i [target.com]` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
What does -i _TARGET_ do in nettacker?
Target (IP, hostname, CIDR).