Usage of pocsuite3 for attacking targets without prior mutual consent is illegal. pocsuite3 is for security testing purposes only

未经事先双方同意，使用 pocsuite3 攻击目标是非法的。 pocsuite3 仅用于安全测试目的

pocsuite3 is an open-sourced remote vulnerability testing and proof-of-concept development framework developed by the Knownsec 404 Team. It comes with a powerful proof-of-concept engine, many nice features for the ultimate penetration testers and security researchers.

• PoC scripts can running with verify, attack, shell mode in different way
• Plugin ecosystem
• Dynamic loading PoC script from anywhere (local file, redis, database, Seebug ...)
• Load multi-target from anywhere (CIDR, local file, redis, database, Zoomeye, Shodan ...)
• Results can be easily exported
• Dynamic patch and hook requests
• Both command line tool and python package import to use
• IPv6 support
• Global HTTP/HTTPS/SOCKS proxy support
• Simple spider API for PoC script to use
• YAML PoC support, compatible with nuclei
• Integrate with Seebug (for load PoC from Seebug website)
• Integrate with ZoomEye, Shodan, etc. (for load target use Dork)
• Integrate with Ceye, Interactsh (for verify blind DNS and HTTP request)
• Friendly debug PoC scripts with IDEs
• More ...

• Python 3.7+
• Works on Linux, Windows, Mac OSX, BSD, etc.

Paste at a terminal prompt:

pip3 install pocsuite3

# use other pypi mirror
pip3 install -i https://pypi.tuna.tsinghua.edu.cn/simple pocsuite3

brew update
brew info pocsuite3
brew install pocsuite3

sudo apt update
sudo apt install pocsuite3

docker run -it pocsuite3/pocsuite3

yay pocsuite3

Or click here to download the latest source zip package and extract

wget https://github.com/knownsec/pocsuite3/archive/master.zip
unzip master.zip
cd pocsuite3-master
pip3 install -r requirements.txt
python3 setup.py install

The latest version of this software is available at: https://pocsuite.org

Documentation is available at: https://pocsuite.org

cli mode

	# basic usage, use -v to set the log level
	pocsuite -u http://example.com -r example.py -v 2

	# run poc with shell mode
	pocsuite -u http://example.com -r example.py -v 2 --shell

	# search for the target of redis service from ZoomEye and perform batch detection of vulnerabilities. The threads is set to 20
	pocsuite -r redis.py --dork service:redis --threads 20

	# load all poc in the poc directory and save the result as html
	pocsuite -u http://example.com --plugins poc_from_pocs,html_report

	# load the target from the file, and use the poc under the poc directory to scan
	pocsuite -f batch.txt --plugins poc_from_pocs,html_report

	# load CIDR target
	pocsuite -u 10.0.0.0/24 -r example.py

	# the custom parameters `command` is implemented in ecshop poc, which can be set from command line options
	pocsuite -u http://example.com -r ecshop_rce.py --attack --command "whoami"

console mode
    poc-console

1. Check for open issues or open a fresh issue to start a discussion around a feature idea or a bug.
2. Fork the repository on GitHub to start making your changes.
3. Write a test which shows that the bug was fixed or that the feature works as expected.
4. Send a pull request or bug to the maintainer until it gets merged or fixed. Make sure to add yourself to Contributors.

• Contributors
• ChangeLog
• Bug tracking
• Copyright
• Pocsuite
• Seebug
• ZoomEye
• Knownsec