AutoPentestX – Linux 自动化渗透测试和漏洞报告工具

AutoPentestX - 自动渗透测试工具包

⚠️法律免责声明

🎯 核心目标

🚀 特色

全面扫描

网络安全测试

情报与分析

安全开发

专业报道

数据管理

📁 项目结构

<span style="background-color:#f6f8fa"><span style="color:#1f2328"><span style="color:#1f2328"><span style="background-color:#f6f8fa"><code>AutoPentestX/ ├── main.py # Main application orchestrator ├── autopentestx.sh # Single-command launcher script ├── install.sh # Automated installation script ├── requirements.txt # Python dependencies ├── config.json # Configuration settings ├── README.md # This file ├── LICENSE # MIT License ├── DISCLAIMER.md # Legal disclaimer │ ├── modules/ # Core functionality modules │ ├── __init__.py │ ├── database.py # SQLite database handler │ ├── scanner.py # Network scanning (Nmap) │ ├── vuln_scanner.py # Vulnerability scanning (Nikto/SQLMap) │ ├── cve_lookup.py # CVE database lookups │ ├── risk_engine.py # Risk assessment calculations │ ├── exploit_engine.py # Safe exploitation engine │ └── pdf_report.py # PDF report generator │ ├── reports/ # Generated PDF reports ├── logs/ # Scan logs ├── database/ # SQLite database files └── exploits/ # Generated Metasploit RC scripts </code></span></span></span></span>

🔧 安装

前提条件

自动化安装

#Clone the repositorygit clone https://github.com/yourusername/AutoPentestX.gitcdAutoPentestX#Make installation script executablechmod +x install.sh#Run installation./install.sh

手动安装

#Install system dependenciessudo apt-get update sudo apt-get install -y python3 python3-pip python3-venv nmap nikto sqlmap#Create virtual environmentpython3 -m venv venvsourcevenv/bin/activate#Install Python dependenciespip install -r requirements.txt#Create directoriesmkdir -p reports logs database exploits#Set permissionschmod +x main.py autopentestx.sh

💻 用途

快速入门

#Activate virtual environment (if not already activated)sourcevenv/bin/activate#Basic scanpython3 main.py -t 192.168.1.100#Or use the wrapper script./autopentestx.sh 192.168.1.100

命令行选项

python3 main.py -t<target>[options] Required Arguments: -t, --target Target IP address or domain name Optional Arguments: -n, --tester-name Name of the penetration tester (default: AutoPentestX Team) --no-safe-mode Disable safe mode (NOT RECOMMENDED) --skip-web Skip web vulnerability scanning (Nikto/SQLMap) --skip-exploit Skip exploitation assessment --version Show version information -h, --help Showhelpmessage

使用示例

基础扫描

python3 main.py -t 192.168.1.100

使用自定义测试器名称扫描

python3 main.py -t example.com -n"John Doe"

快速扫描（跳过网页和漏洞）

python3 main.py -t 10.0.0.1 --skip-web --skip-exploit

全扫描，包含所有功能

./autopentestx.sh 192.168.1.100

📊 产出与报告

PDF报告

数据库

日志文件

🔬 技术细节

扫描工作流程

<span style="background-color:#f6f8fa"><span style="color:#1f2328"><span style="color:#1f2328"><span style="background-color:#f6f8fa"><code>User Input (Target) ↓ OS Detection (Nmap) ↓ Port Scanning (TCP/UDP) ↓ Service Detection & Version Enumeration ↓ Vulnerability Scanning (Nikto/SQLMap) ↓ CVE Database Lookup ↓ Risk Score Calculation ↓ Exploit Matching & Simulation ↓ PDF Report Generation ↓ Database Storage </code></span></span></span></span>

风险评分系统

🛠️ 集成工具

🔐 Security Features

Safe Mode (Default)

Configurable Options

Data Protection

📝 Configuration

{"scan_settings": {"default_safe_mode":true,"timeout":300},"vulnerability_scanning": {"nikto_enabled":true,"sqlmap_enabled":true},"risk_scoring": {"cvss_thresholds": {"critical":9.0,"high":7.0,"medium":4.0,"low":0.1} } }

🐛 故障排除

常见问题

#Solution: Run Nmap portions with sudo or adjust permissionssudo python3 main.py -t<target>

#Solution: Install missing toolssudo apt-get install nikto sqlmap

#Solution: Ensure virtual environment is activatedsourcevenv/bin/activate pip install -r requirements.txt

#Solution: Install reportlab dependenciespip install --upgrade reportlab

🤝 贡献

📜 许可

👥 作者

🙏 致谢

📞 支持

🔄 版本历史

v1.0.0 （2025-11-30）

🎓 教育资源

⚡ 演出笔记

🔮 未来改进