SAVNAC - CANVAS-like exploitation framework with easy plugin architecture

Introducing SAVNAC, an exploitation framework with inspiration from Immunity Canvas.


I have basically decided this is for Linux, specifically Kali Linux. It has all the tools you need ready to go, and even Metasploit which Savnac might utilize. 

==============================================================

Future updates will be posted at bottom.

==============================================================


Note:
Right now I have quite a bit of work to do. But in the future of this project I might just need a small team to keep up to work with the security world with me, and help update savnac.
I know a team might seem strange for our current age (assuming my team will all be around my age), and I know it will be a challenge to add the classic exploits and any future ones, but I believe we just need to try our best :).
Plus imagine when we get larger, we will need to work on creating our own exploits. Get some 0-days! (Reverse engineering patches anyone?)



Savnac is a project that I recently started working on.
Basically its a (solely CLI for now) framework with an easy to use plug-in architecture.

Exploits can easily be created and brought into the framework to use later.

Savnac.py example using a simple test aux module:

==============================================================
Updates:

• Greatly improved modulemanager.py
• Added properties and improved the way modules (or 'plug-ins') are handled.
•  

Available properties for modules:

• Title - Title of the module
• Description - Obviously the desc of the module
• Targets - Dictionary of targets the module works on
• Parameters - List of what is needed to call the module
• Type - Exploit, Auxiliary. (in the future: Recon, etc) 

Not currently implemented:

• Site - Client-side, Remote, etc
• Arch - Windows, Linux, Android

To Do:

• Add some more core functionalities and exploit dev utilities.

==============================================================

Read More

Windows Exploit Development Framework. (Helping Hand)

This is not anywhere close to a release version, but it seems that some friends wanted to check it out :P

==================

I have stopped playing with this, with my creation and every-day work with savnac, I don't have time for wed-f anymore. I will also basically be re-creating wed-f inside of Savnac to add some exploit development utilities to its core.

==================

So, I will be making updates still; hopefully with some ideas other users can give me.
(It would take a little longer to update the github repo, but any major changes will be updated immediately)

I want to tell you ahead that this is still a sweet little baby; And has a long way to go, I look forward to your critiques and ideas.

Here is the source: WEDF - GitHub

Examples:
Mini-stream [b]BOF[/b] & Download+Execute putty.exe (Generates "malicous" .m3u)

Testing Shellcode:

Read More