Skip to content

Offline Pentest Script 4.14.0

Choose a tag to compare

@cjlfilm cjlfilm released this 01 Oct 16:26
· 7 commits to main since this release
1045ee5

4.14.0
— Tor detection
Added Tor service detection, ported from a standalone Tor-finder script:
9051 — PROTOCOLINFO control-port probe → HIGH if confirmed (the one genuinely strong signal)
9050 / 9150 — SOCKS5 negotiation → MEDIUM, explicitly labeled unconfirmed (SOCKS5 alone isn't proof of Tor)
8118 — HTTP proxy probe (Privoxy pairing) → INFO
9001 / 9030 / 9040 — port-open-only weak signals (ORPort/directory/transparent proxy) → INFO, can never outrank a confirmed role
Fixed a bug caught during testing: the SOCKS5 finding was wrongly chained as elif off the control-port finding, so it silently disappeared whenever both were present on the same host. Both are now independent findings.
— Adaptive phase progress display
The "Adaptive read-only checks" phase (SMB listing, NFS exports, URL crawl, etc.) was the one phase that never used the live per-host progress display the other phases have — it printed one static line and nothing until it finished. It now goes through the same parallel_host_scan() mechanism as everything else, so you see live per-host timers during this phase too.
— Index page changes
Reordered the Assessment status boxes: Warning → Recommendations → Info (was Recommendations → Warnings → Info).
Those three boxes are now collapsible (

), and expanding one lists every finding in that category with severity, title, and host IP — each item links directly to that host's report page.
Removed the "Assessment: Offline" card; replaced it with the actual scan mode used (QUICK / DEEP / INTRUSIVE).
Page title and heading changed from "Offline Pentest Assessment" to "Pentest Assessment: /" (falls back to the raw target string if it wasn't a plain IP/CIDR).