2.3.3: Bug fixing

• [555ee41] Fixed bad parsing of FQDN targets in sectools.

2.3.2: Added HTTPs support

Features

• Multithreaded workers to search for Apache tomcat servers.
• Multiple target source possible:
  • Retrieving list of computers from a Windows domain through an LDAP query to use them as a list of targets.
  • Reading targets line by line from a file.
  • Reading individual targets (IP/DNS/CIDR) from -tt/--target option.
• Custom list of ports to test.
• Supports HTTP and HTTPs schemes.
• Supports self-signed certificates.
• Tests for /manager/html access and default credentials.
• List the CVEs of each version with the --list-cves option

2.3.1

Updated requirements.txt

Release 2.3.1

2.2

Merge remote-tracking branch 'origin/main' into main

2.1: Bug fixes

Fixes #9

Release 2.1

2.0: Added reporting, list of targets from a windows domain

Features

• Multithreaded workers to search for Apache tomcat servers.
• Multiple target source possible:
  • Retrieving list of computers from a Windows domain through an LDAP query to use them as a list of targets.
  • Reading targets line by line from a file.
  • Reading individual targets (IP/DNS/CIDR) from -tt/--target option.
• Custom list of ports to test.
• Tests for /manager/html access and default credentials.
• List the CVEs of each version with the --list-cves option

1.3: Added list of CVEs

Features

• Multithreaded workers to search for Apache tomcat servers.
• Multiple target source possible:
  • Retrieving list of computers from a Windows domain through an LDAP query to use them as a list of targets.
  • Reading targets line by line from a file.
  • Reading individual targets (IP/DNS/CIDR) from -tt/--target option.
• Custom list of ports to test.
• Tests for /manager/html access and default credentials.
• List the CVEs of each version with the --list-cves option

Demonstration

1.2: First stable version

Features

• Multithreaded workers to search for Apache tomcat servers.
• Multiple target source possible:
  • Retreiving list of computers from a windows domain through an LDAP query to use them as a list of targets.
  • Reading targets line by line from a file.
  • Reading individual targets (IP/DNS/CIDR) from -tt/--target option.
• Custom list of ports to test.
• Tests for /manager/html access and default credentials.

Demonstration