Hack Forums
Automatic quote "white label" penetration test. - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Coders Lounge (https://hackforums.net/forumdisplay.php?fid=5)
+---- Thread: Automatic quote "white label" penetration test. (/showthread.php?tid=6246287)

Automatic quote "white label" penetration test. - Mr. Robot - Jul 12, 2023

So the goal is to create something that can do a nice overview of a website into a PDF output from simply entering in the target URL/domain.

I've been reworking my old code to make it more streamlined and so far it's coming out great. I am mainly making this thread to find someone who wants to work on it with me via voice and convo.
Monetization options:
1. Sell it as a white label so people can throw their own logo on it and offer penetration test overviews for companies.
2. Create a website that users can enter their URL and email address and it will run the scan (provided they have a proof.txt file on their domain) and email them the PDF output.
3. Fiverr/Other style services.

It uses dynamic paragraphing based on the output so let's say it identifies port "22" or another "SSH" port, then we will add in a paragraph using the variable of the domain/IP that exposed that port and what information is related to that.

I also have a number of extra pieces of information being attached such as OMG cables, MiTM attacks, Insider threats etc to help companies identify weak points to investigate with more being added.

I've made it in such a way that it's extremely edit to work on intentionally so we can expand it handle any errors appropriately so that EVERY pdf file will look good regardless.

Database lookups are also implemented using the leak-lookup API wherein we can do a count of all the identified breaches for a domain and add in discussion about those breaches and how credential reuse in different website platforms leave them vulnerable etc etc.

This is not a full deep dive, simply a cost-effective quick overview. I've also found it extremely useful for scanning scam Chinese sites so there's that too.

I am open to all suggestions and ideas.

Here is how it is currently looking. All generated from simply entering the domain "hackforums.net". (I have disabled a few subdomain identifiers for this run)

Spoiler (Click to View)

# Most recent updates:
Added in some images/paragraphing
Added in Port scan results for domains not behind cloudflare
Added in Confidentiality notice on Title page

Spoiler (Click to View)


#Most recent updates now:
Added in categories for explaining LFI, RFI, XSS, SQLi, and a bunch of other shit.
Fixed the password/database lookup and count

[Image: recording20.gif?width=1377&height=676]

RE: Automatic quote "white label" penetration test. - Lukasi - Jul 12, 2023

Can it run on Windows?

RE: Automatic quote "white label" penetration test. - Mr. Robot - Jul 12, 2023

(Jul 12, 2023 05:15 AM)Lukasi Wrote:  Can it run on Windows?

Of course. Working hard on it.

BUMP - Stanley - Jul 13, 2023

I'm Stanley HF's helper bot. The OP (original poster) of this thread wants everyone to see this page and has elected to bump it to the top of the showthread listing. Since HF doesn't want a ton of LQP (Low Quality Posts) this is the best method of bumping your content. There is a small βyte fee for each bump. Any OP can bump any of their threads on HF from the linked icon on the top of their first post.

If you haven't already read the first post of this thread we encourage you to do so.

Thanks,
Stanley

RE: Automatic quote "white label" penetration test. - vexiata - Jul 13, 2023

This looks sick, how long did it take to make if you don't mind me asking?

RE: Automatic quote "white label" penetration test. - CentryAgo - Jul 13, 2023

(Jul 13, 2023 10:42 AM)vexiata Wrote:  This looks sick, how long did it take to make if you don't mind me asking?

im guessing 3 months

RE: Automatic quote "white label" penetration test. - Mr. Robot - Jul 13, 2023

(Jul 13, 2023 10:03 PM)CentryAgo Wrote:  im guessing 3 months

Lmao nah like around a week or so.

RE: Automatic quote "white label" penetration test. - CentryAgo - Jul 15, 2023

(Jul 13, 2023 10:44 PM)Mr. Robot Wrote:  Lmao nah like around a week or so.

my boyyyy 🤣

RE: Automatic quote "white label" penetration test. - Mr. Robot - Jul 15, 2023

(Jul 15, 2023 09:43 PM)CentryAgo Wrote:  my boyyyy 🤣

Working hard on it. Almost done.

RE: Automatic quote "white label" penetration test. - Hackers - Jul 16, 2023

Nice, looks like a great tool and the PDF deliverable can make this software a pretty powerful funnel if people pay for reports or have subscriptions to access a certain # of reports per mo.

RE: Automatic quote "white label" penetration test. - Mr. Robot - Jul 16, 2023

(Jul 16, 2023 05:36 AM)nodes Wrote:  Nice, looks like a great tool and the PDF deliverable can make this software a pretty powerful funnel if people pay for reports or have subscriptions to access a certain # of reports per mo.

Yeah definitely that's a good thought.

RE: Automatic quote "white label" penetration test. - CtlAltAnon - Jul 22, 2023

This is really cool. What re you looking for help with it on? This is a really cool project that interests e but I am unsur e of what I could bring to the table. It looks like you have it all down 100%

RE: Automatic quote "white label" penetration test. - Mr. Robot - Jul 22, 2023

(Jul 22, 2023 08:21 AM)CtlAltAnon Wrote:  This is really cool. What re you looking for help with it on? This is a really cool project that interests e but I am unsur e of what I could bring to the table. It looks like you have it all down 100%

Still lots too do, also inspired by my avatar or came up with it 7 years too late? :D

RE: Automatic quote "white label" penetration test. - CtlAltAnon - Jul 22, 2023

(Jul 22, 2023 10:38 AM)Mr. Robot Wrote:  Still lots too do, also inspired by my avatar or came up with it 7 years too late? :D

No yours is way cooler than mine! I didn't even see it was the masks I have. I googled guy fawkes mr robot mask, downloaded, cropped and uploaded. I asked someone on here about remaking it.

On the subject of your project I definitely think you have a great product here and it would make a great subscription service. As far as pricing I would try and get a good idea of what your target market makes off of their jobs and try to find a sweet spot that would fit into their budget while offering them the ease of use with your service. That way you don't make the price too high or too low but you can try to focus it in. Because something like this in that industry would probably have a nice monthly price tag.

RE: Automatic quote "white label" penetration test. - Mr. Robot - Jul 22, 2023

(Jul 22, 2023 10:54 AM)CtlAltAnon Wrote:  No yours is way cooler than mine! I didn't even see it was the masks I have. I googled guy fawkes mr robot mask, downloaded, cropped and uploaded. I asked someone on here about remaking it.

On the subject of your project I definitely think you have a great product here and it would make a great subscription service. As far as pricing I would try and get a good idea of what your target market makes off of their jobs and try to find a sweet spot that would fit into their budget while offering them the ease of use with your service. That way you don't make the price too high or too low but you can try to focus it in. Because something like this in that industry would probably have a nice monthly price tag.

I am currently coding up a part for parameter extraction to add on which is slowly coming along. Crawls the initial website page for parameters and then will generate a burpsuite request you can paste right in for testing if it recognizes a login form. All the other endpoints can then be tested for LFI/RFI/XSS etc etc

[Image: AsOgQvP.png]