Security Testing & Research Offensive Methodology

Advanced Penetration Testing Framework v3.0

---

⚠️ LEGAL DISCLAIMER

For AUTHORIZED security testing ONLY! Unauthorized access is illegal. Get written permission before testing. User is responsible for all actions.

---

🚀 Quick Installation

git clone https://github.com/Attazy/strom.git
cd strom
python3 -m venv venv
source venv/bin/activate  # Linux/Mac | venv\Scripts\activate for Windows
pip install -r requirements.txt
python3 strom.py

---

📋 Core Modules

[1] 🔍 Reconnaissance - 22 Features

DNS, WHOIS, Port Scanning (65+ ports), Subdomain Enumeration (244+ wordlist), SSL/TLS Analysis, WAF Detection, ASN/BGP Lookup, Certificate Transparency, OSINT Social Media (16+ platforms), Threat Intelligence (10+ sources), Cloud Detection

[2] 🌐 Web Scanner

CMS detection, Security headers, Form testing, Directory bruteforce, API discovery

[3] 💣 Exploitation Engine

SQL Injection, RCE, XSS, LFI, SSRF, XXE, Template Injection, Deserialization

[4] 🛡️ WAF Bypass

Auto-detect WAF, 20+ bypass techniques, Payload obfuscation

[5] 🔓 Post-Exploitation

Privilege escalation, Persistence, Network pivoting, Keylogger, File exfiltration

[6] 🔧 Utilities

Encoder/Decoder, Hash cracker, Password generator, Port scanner

[7] 📊 Reporting

HTML, PDF, Markdown, JSON reports with risk scoring and CVSS integration

[8] 🎨 Payload Generator

100+ SQL, 50+ RCE, XSS, LFI, XXE, SSRF payloads

[9] 📱 Android Remote Access

APK generation, Remote control, SMS/Call interception, Location tracking

---

🎯 Quick Start

python3 strom.py
# Select [1] Reconnaissance → Enter target → Choose features → Export results

Workflows:

• Quick (5 min): DNS → WHOIS → Port Scan
• Standard (15 min): Full Reconnaissance
• Deep (30+ min): Full Recon + Advanced Features

---

⚙️ Configuration (Optional)

Edit config.yaml to enable API integrations:

api_keys:
  shodan: "YOUR_KEY"      # Get free at account.shodan.io
  censys_id: "YOUR_ID"    # Get free at censys.io

All features work without API keys.

---

📚 Documentation

• 🚀 ADVANCED_UPGRADES.md - Complete upgrade guide
• ⚡ QUICK_REFERENCE_ADVANCED.md - Fast reference
• 📋 CHANGELOG.md - Version history
• 📱 README_ANDROID.md - Android module guide

---

📜 License

MIT License - Commercial use, modification, and distribution allowed. See LICENSE for details.

---

🌩️ STROM - Security Testing Reconnaissance Offensive Module

Made with ❤️ by Attazy | Version 3.0.0 | January 2026

XXE, SSRF Copy-paste ready [9] 📱 Android Remote Access ⚡ NEW Remote control Android devices

QR code deployment • No Metasploit required! • Screen mirror • Camera • SMS • Location • File browser