Share 
## https://sploitus.com/exploit?id=AB25379E-8985-5A94-B56F-83CBFDBED355
# nullsec

**A menu-driven offensive-security multitool โ€” 37 modules and 271 built-in tools behind one prompt.**

Recon ยท password cracking ยท crypto & cipher breaking ยท web/API testing ยท forensics ยท steganography ยท OSINT ยท evasion ยท payload generation โ€” most of it pure Python with no setup.

[![CI](https://github.com/fsiuhgshiqoih32/NullsecMultitools/actions/workflows/ci.yml/badge.svg)](https://github.com/fsiuhgshiqoih32/NullsecMultitools/actions/workflows/ci.yml)
[![Release](https://img.shields.io/github/v/release/fsiuhgshiqoih32/NullsecMultitools?label=release&color=2ea043)](https://github.com/fsiuhgshiqoih32/NullsecMultitools/releases/latest)
[![Downloads](https://img.shields.io/github/downloads/fsiuhgshiqoih32/NullsecMultitools/total?label=downloads&color=1f6feb)](https://github.com/fsiuhgshiqoih32/NullsecMultitools/releases)
![Python](https://img.shields.io/badge/python-3.11%2B-blue)
![Platform](https://img.shields.io/badge/platform-Windows%20%7C%20Linux%20%7C%20macOS-lightgrey)
[![License: MIT](https://img.shields.io/github/license/fsiuhgshiqoih32/NullsecMultitools?color=2ea043)](LICENSE)
![Modules](https://img.shields.io/badge/modules-37-red)



```
                ____
   ____  __  __/ / /_______  _____
  / __ \/ / / / / / ___/ _ \/ ___/
 / / / / /_/ / / (__  )  __/ /__
/_/ /_/\__,_/_/_/____/\___/\___/
        offensive security framework ยท authorized use only
```

Most of nullsec runs on **pure Python** (just `rich` + `requests`). Heavier external
tools โ€” `nmap`, `sqlmap`, `hydra`, `nuclei`, `metasploit`, `john`, `hashcat` โ€” light
up automatically once they're installed, **natively or through WSL**. Nothing is
required to start: missing tools simply grey out their module and the built-in
scanners/crackers keep working.

- **37 modules ยท 271 built-in tools**
- **2,964** curated tools in the searchable catalog
- **~60,900** exploit/template modules reachable once Exploit-DB, Nuclei, and Metasploit are installed
- **71** ready-to-fill reverse/bind/web-shell payloads + msfvenom builders
- Session reporting to Markdown/HTML, a CyberChef-style transform pipeline, and a WSL bridge for Linux-only tools

---

## Screenshots



**Home** โ€” every module one keystroke away



**Modules & tools** โ€” a module menu, and the Payload Arsenal building a reverse shell

  



---

## Quick start

```bash
pip install -r requirements.txt
python main.py
```

Optional extras unlock a few more tools and **degrade gracefully** when absent
(`cryptography` โ†’ AES/RSA lab, `pillow` โ†’ PNG/EXIF stego, `pyfiglet` โ†’ the banner).

### Prebuilt Windows executable

Don't want Python? Build a standalone, self-contained `nullsec.exe` (bundles the
icon, catalog, and payloads โ€” runs on any 64-bit Windows):

```bash
pyinstaller nullsec.spec --clean --noconfirm
# โ†’ dist/nullsec.exe
```

> The exe is unsigned, so Windows SmartScreen shows a warning on first run โ€”
> **More info โ†’ Run anyway**, or right-click โ†’ Properties โ†’ **Unblock**.

---

## Usage

At the home prompt, press a module's key to open it, or use a command:

| Command | Does |
|---|---|
| `` | open a module (e.g. `1`, `c`, `o`, `w`) โ€” **keys are case-sensitive** (`E`=Evasion, `e`=Reversing) |
| `search ` | search the catalog + every module's tools, then jump straight in |
| `use ` | show a catalogued tool's install command and details |
| `r` / `t` | session report ยท external-tool status |
| `help` / `?` | command help |
| `q` | quit |

Findings from recon/web/network modules collect in the **session report** (`r`),
which you can save as Markdown or a styled HTML page.

See **[USAGE.md](USAGE.md)** for a full walkthrough.

---

## Modules

| Group | Modules |
|---|---|
| **Recon / OSINT** | Reconnaissance ยท Network ยท OSINT & DNS ยท Metadata ยท Tool Catalog ยท Email / Phishing |
| **Web / Exploit** | Web ยท Payload Forge ยท HTTP Interceptor ยท Payload Arsenal ยท Brute-force ยท Vuln Scan ยท LOLBins ยท Exploit Toolkit |
| **AD / Network** | AD Attacks ยท SMB / Shares ยท Post-Exploitation ยท Wireless |
| **Data / Cloud** | Databases ยท Cloud ยท Mobile |
| **Crypto / Stego** | Crypto & Encoding ยท Cipher Lab ยท Hashes & Cracking ยท Steganography ยท Encoding Recipe |
| **Wordlists** | Passwords ยท Generators ยท Wordlists |
| **Forensics / DFIR** | Forensics ยท Reversing ยท Data Extractor |
| **IoT / Hardware** | IoT / ICS / SCADA ยท Hardware / Physical |
| **Evasion / Defense** | Evasion & Bypass ยท Detection |
| **System** | Install Arsenal |

---

## How it fits together

- **`main.py`** draws the home grid and dispatches to modules.
- **`toolkit/*.py`** โ€” one file per module, each exposing a `MENU` dict of `(label, function)`.
- **`toolkit/utils.py`** โ€” shared console, the WSL bridge, external-tool detection, and the session reporter.
- **`toolkit/arsenal.dat`** โ€” the base64 payload dataset (regenerate with `python tools/gen_arsenal.py`).
- **`data/tools.json`** โ€” the importable tool catalog.

Run the smoke tests after changes:

```bash
python tests/test_smoke.py
```

---

## โš ๏ธ Legal

nullsec is for **authorized use only** โ€” your own machines, lab VMs, and
CTF / training targets, or systems you have **explicit written permission** to test.
Unauthorized access to computer systems is illegal. You are solely responsible for
how you use this software. The authors accept no liability for misuse.

## License

[MIT](LICENSE) ยฉ 2026 anonymous