Nettacker

No entries match these filters. Clear filters

1. 0.4.1 Aug 24, 2026 · issue 056

   Nettacker 0.4.1 adds SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface./DefectDojo output, custom wordlists, port exclusions, custom headers, and new scanners for CUPS, SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments., Jenkins, and more.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 0.4.1 https://github.com/OWASP/Nettacker.git
   # already have the repo? check out this version:
   $ git checkout 0.4.1

   • Adds SARIF and DefectDojo-compatible JSON as output formats for scan results.
   • Adds port exclusions, HTTP scheme selection, custom request headers, and sensitive-header filtering to scan configuration.
   • Adds custom wordlists and directory-enumeration base paths for brute-force and discovery modules.
   • Moves runtime data directory from .data to .nettacker/data (SQLite database and results), with automatic database migration.
   • Exposes service-discovery, port-exclusion, and custom-header options in the Web UI.

   +6 more show less

   • Adds browser-based file uploads for targets and wordlists in the Web UI.
   • Adds searchable profiles, scan methods, and results to the Web UI.
   • Adds crt.name as a source for subdomain discovery.
   • Adds FreeBSD support and ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. container images.
   • Adds new scanners for CUPS, configuration files, SMB brute-force, Jenkins, SmarterMail, CrushFTP patch-date, and Adobe AEM patch-date.
   • Expands WordPress plugin coverage and refreshes bundled discovery wordlists.

   11 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Runtime data (SQLite database and results) has moved from .data to .nettacker/data; any scripts or tooling that reference the old .data path must be updated.
2. 0.4.0 Sep 27, 2024 · release notes

   Nettacker 0.4.0 adds dir_scan and SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./TLS modules, Scan Compare feature, -d shortcut, and ScanID support

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 0.4.0 https://github.com/OWASP/Nettacker.git
   # already have the repo? check out this version:
   $ git checkout 0.4.0

   └──▷ USE IT
   Run a scan skipping service discovery using the new shortcut flag to speed up large network sweeps.
   shell copy

   nettacker -d -i target.com --subdomain-list targets.txt

   Use the new dir_scan module to enumerate directories on a web server.
   shell copy

   nettacker -i target.com -m dir_scan

   • --skip-service-discovery can now be abbreviated as the -d CLI flag
   • Adds dir_scan module for directory enumeration
   • Adds SSL/TLS scanning modules for protocol and configuration analysis
   • Introduces Scan Compare feature to analyze differences between scans
   • CLI output and HTML reports now include a unique ScanID field for result tracking

   5 details in Everything

3. 0.3.3 Jan 20, 2024 · release notes

   New Ivanti, Citrix, and WordPress scanning modules added to Nettacker 0.3.3

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 0.3.3 https://github.com/OWASP/Nettacker.git
   # already have the repo? check out this version:
   $ git checkout 0.3.3

   • Adds ivanti_ics_cve-2023-46805 vulnerability detection module for Ivanti ICSICSIndustrial Control Systems — hardware and software that monitor and control physical processes like power grids, pipelines, and manufacturing lines, making them a target for cyber tools focused on operational technology environments.
   • Adds ivanti_epmm_cve-2023-35082 vulnerability detection module for Ivanti EPMM
   • Adds wordpress_post_smtp_cve-2023-6875 vulnerability detection module for WordPress POST SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. Mailer Plugin
   • Adds citrix_last_patched_date_scan module for scanning Citrix Gateway last patched date
   • Adds html_title_scan module for HTML title scanning

   +2 more show less

   • Adds ivanti_ics_last_patched_date_scan module for Ivanti ICS last patched date scan
   • Adds ivanti_epmm_last_patched_date_scan module for Ivanti EPMM last patched date scan

   7 details in Everything

4. 0.3.2 Oct 31, 2023 · release notes

   New modules added for Adobe Coldfusion (CVE-2023-26360), Confluence version scanning (CVE-2023-22515), Citrix (CVE-2023-4966), and specific WordPress plugin vulnerabilities.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 0.3.2 https://github.com/OWASP/Nettacker.git
   # already have the repo? check out this version:
   $ git checkout 0.3.2

   • Adds confluence_version_scan and confluence_CVE-2023-22515 modules for Confluence version detection and vulnerability scanning
   • Adds citrix_CVE-2023-4966 module to detect Citrix vulnerabilities

   2 details in Everything

5. 0.3.1 Jul 5, 2023 · release notes

   Nettacker 0.3.1 adds modules for CVE-2023-24488, MOVEit, HTTP status/redirect scanning, and POP3 brute-forcing

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 0.3.1 https://github.com/OWASP/Nettacker.git
   # already have the repo? check out this version:
   $ git checkout 0.3.1

   └──▷ TRY IT
   Scan a target for the Citrix CVE-2023-24488 vulnerability using the new module.
   copy

   $ nettacker -g <target> -m citrix_cve_2023_24488_vuln

   Scan for Progress MOVEit instances using the new version scan module.
   copy

   $ nettacker -g <target> -m moveit_version_scan

   • moveit_version_scan module to scan for Progress MOVEit instances
   • http_status_scan module for HTTP status code scanning
   • http_redirect_scan module for HTTP redirect detection

   3 details in Everything