NetHunter

Features

Installation

Clone the Repository

Install Ruby

Ensure Ruby (version 2.5 or higher) is installed. Download it from ruby-lang.org or use a package manager:

Ubuntu/Debian:

macOS:

Windows:

Use the RubyInstaller.

Verify the installation:

Install Required Gems

Set Up Directories

The tool automatically creates the following directories if they don't exist:

• payloads/: For custom payload scripts.
• exploits/: For custom exploit scripts.
• output/: For saving scan results.

Configuration

On the first run, NetHunter generates a config.json file with default settings (e.g., scan timeout, default ports, thread count). Edit this file to customize behavior as needed.

Usage

Run NetHunter with the following command:

Command-Line Options

Examples

Basic Port Scan

Scan an IP Range with Custom Ports and Verbose Output

Run a Vulnerability Scan and Save Output

List Available Payloads

Custom Payloads

NetHunter allows you to extend its functionality with custom Ruby payloads, stored in the payloads/ directory.

Adding a Custom Payload

1. Create a Ruby file in payloads/ (e.g., my_payload.rb).
2. Define a class matching the file name (e.g., MyPayload for my_payload.rb).
3. Implement the run method, which takes:
   • target: The target IP or hostname.
   • open_ports: An array of open ports.
   • options: A hash of command-line options.
4. Add a # Description: comment at the top.

Payload Template

# Description: A custom payload example
class MyPayload
  def run(target, open_ports, options)
    puts "Running custom payload on #{target}"
    results = { target: target, findings: [] }

    if open_ports.include?(80)
      results[:findings] << "Port 80 open, potential HTTP service."
    end

    if options[:verbose]
      puts "Verbose: #{results[:findings].join(', ')}"
    end

    results
  end
end

Using a Custom Payload

Available Payloads

NetHunter version 1.1.0 includes several pre-built payloads to help you get started:

HTTP Vulnerability Scanner

Scans for common HTTP vulnerabilities such as XSS, SQL injection, open directories, and misconfigured servers.

# Description: Scans for common HTTP vulnerabilities (XSS, SQLi, open directories)
class HttpVulnerabilityScanner
  def run(target, open_ports, options)
    # Implementation details
  end
end

Service Enumeration

Performs advanced service enumeration and fingerprinting to identify service types, versions, and potential misconfigurations.

# Description: Performs advanced service enumeration and fingerprinting
class ServiceEnumeration
  def run(target, open_ports, options)
    # Implementation details
  end
end

SSH Weak Credentials

Tests SSH servers for weak or default credentials using a built-in dictionary of common username/password combinations.

# Description: Tests SSH for weak or default credentials
class SshWeakCredentials
  def run(target, open_ports, options)
    # Implementation details
  end
end

List all available payloads with:

Security Notice

By using NetHunter, you agree to:

• Only scan systems you own or have explicit permission to test
• Respect the privacy and security of others
• Use the tool responsibly and ethically
• Comply with all applicable laws and regulations

Contributing

Contributions to NetHunter are welcome! Here's how you can help improve the project:

• Report bugs and suggest features by opening issues on GitHub
• Submit pull requests with bug fixes or feature enhancements
• Create new payloads and share them with the community
• Improve documentation and provide usage examples

Please follow the coding style and guidelines in the repository.