Saturday, August 1, 2015

SAVNAC - CANVAS-like exploitation framework with easy plugin architecture

Introducing SAVNAC, an exploitation framework with inspiration from Immunity Canvas.


I have basically decided this is for Linux, specifically Kali Linux. It has all the tools you need ready to go, and even Metasploit which Savnac might utilize. 

==============================================================

Future updates will be posted at bottom.

==============================================================


Note:
Right now I have quite a bit of work to do. But in the future of this project I might just need a small team to keep up to work with the security world with me, and help update savnac.
I know a team might seem strange for our current age (assuming my team will all be around my age), and I know it will be a challenge to add the classic exploits and any future ones, but I believe we just need to try our best :).
Plus imagine when we get larger, we will need to work on creating our own exploits. Get some 0-days! (Reverse engineering patches anyone?)



Savnac is a project that I recently started working on.
Basically its a (solely CLI for now) framework with an easy to use plug-in architecture.

Exploits can easily be created and brought into the framework to use later.

Savnac.py example using a simple test aux module:




==============================================================
Updates:

  • Greatly improved modulemanager.py
  • Added properties and improved the way modules (or 'plug-ins') are handled.
  •  

Available properties for modules:
  • Title - Title of the module
  • Description - Obviously the desc of the module
  • Targets - Dictionary of targets the module works on
  • Parameters - List of what is needed to call the module
  • Type - Exploit, Auxiliary. (in the future: Recon, etc) 
Not currently implemented:
  • Site - Client-side, Remote, etc
  • Arch - Windows, Linux, Android

To Do:
  • Add some more core functionalities and exploit dev utilities.


==============================================================


0 comments:

Post a Comment