## https://sploitus.com/exploit?id=EC8FF79B-59A5-570A-A1CE-B90B817125E9
# AutoPentest Framework
A modular Automated Penetration Testing Framework for Red Team and VAPT workflows.
## Overview
This framework automates reconnaissance, port scanning, service detection, vulnerability mapping, exploit suggestion, and report generation, presenting it all in a professional CLI interface.
## Features
- **Reconnaissance**: DNS enumeration, WHOIS lookup, and subdomain detection.
- **Port Scanning Engine**: Uses `nmap` for fast, accurate TCP SYN scanning on top 1000 ports.
- **Service Enumeration**: Detects running services and OS versions.
- **Vulnerability Mapping**: Maps discovered services and versions against a CVE database to pinpoint potential weaknesses.
- **Exploit Suggestion**: Suggests potential Metasploit modules and exploitation paths.
- **Reporting**: Generates beautiful HTML and structured JSON reports.
- **Logging & CLI**: Comprehensive logging to `logs/framework.log` and a colorful, interactive CLI using Rich.
## Architecture
The framework is fully modular:
- `recon/`: Information gathering modules.
- `scanner/`: Nmap-based scanning engines.
- `vulnerability/`: CVE mapping and exploit suggestion logic.
- `reports/`: HTML/JSON report generation.
- `utils/`: Core utilities like logging, input validation, and banners.
## Installation
Ensure you have Python 3.8+ and Nmap installed on your system.
```bash
# Clone the repository
git clone https://github.com/yourusername/auto-pentest-framework.git
cd auto-pentest-framework
# Install requirements
pip install -r requirements.txt
```
*Note for Kali Linux users: `nmap` is already installed by default. For Debian/Ubuntu, run `sudo apt install nmap`.*
## Usage
Run the main script and provide a target IP or Domain.
```bash
python main.py --target example.com
```
### Example Output
```
[+] Target Resolved
[+] Starting Reconnaissance
[+] Running Nmap Scan
[+] Detecting Vulnerabilities
[!] Critical Vulnerability Found
[+] Generating Report
```
## Technologies Used
- **Python 3**
- **Nmap / python-nmap**
- **Rich & Colorama** (CLI aesthetics)
- **Jinja2** (HTML Templating)
- **dnspython & python-whois** (Reconnaissance)
## Ethical Usage Disclaimer
**Use only on authorized systems and labs.**
This tool is intended for educational purposes, authorized security testing, and Red Team operations only. The authors are not responsible for any misuse or damage caused by this program. Do NOT use it on systems you do not own or have explicit permission to test.
# AutoPentest-Framework