https://cybertoolchain.io/tools/nettacker New releases and features in Nettacker, tracked by The Cyber Toolchain. en Mon, 24 Aug 2026 21:46:40 GMT https://github.com/OWASP/Nettacker/releases/tag/0.4.1 https://github.com/OWASP/Nettacker/releases/tag/0.4.1 Mon, 24 Aug 2026 21:46:40 GMT Nettacker 0.4.1 adds SARIF/DefectDojo output, custom wordlists, port exclusions, custom headers, and new scanners for CUPS, SMB, Jenkins, and more. • Adds SARIF and DefectDojo-compatible JSON as output formats for scan results. • Adds port exclusions, HTTP scheme selection, custom request headers, and sensitive-header filtering to scan configuration. • Adds custom wordlists and directory-enumeration base paths for brute-force and discovery modules. • Moves runtime data directory from `.data` to `.nettacker/data` (SQLite database and results), with automatic database migration. • Exposes service-discovery, port-exclusion, and custom-header options in the Web UI. • Adds browser-based file uploads for targets and wordlists in the Web UI. • Adds searchable profiles, scan methods, and results to the Web UI. • Adds `crt.name` as a source for subdomain discovery. • Adds FreeBSD support and ARM container images. • Adds new scanners for CUPS, configuration files, SMB brute-force, Jenkins, SmarterMail, CrushFTP patch-date, and Adobe AEM patch-date. • Expands WordPress plugin coverage and refreshes bundled discovery wordlists. Breaking changes: • Runtime data (SQLite database and results) has moved from `.data` to `.nettacker/data`; any scripts or tooling that reference the old `.data` path must be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nettacker https://github.com/OWASP/Nettacker/releases/tag/0.4.0 https://github.com/OWASP/Nettacker/releases/tag/0.4.0 Fri, 27 Sep 2024 17:23:23 GMT Nettacker 0.4.0 adds `dir_scan` and SSL/TLS modules, Scan Compare feature, `-d` shortcut, and `ScanID` support • `--skip-service-discovery` can now be abbreviated as the `-d` CLI flag • Adds `dir_scan` module for directory enumeration • Adds SSL/TLS scanning modules for protocol and configuration analysis • Introduces Scan Compare feature to analyze differences between scans • CLI output and HTML reports now include a unique `ScanID` field for result tracking Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nettacker https://github.com/OWASP/Nettacker/releases/tag/0.3.3 https://github.com/OWASP/Nettacker/releases/tag/0.3.3 Sat, 20 Jan 2024 22:17:39 GMT New Ivanti, Citrix, and WordPress scanning modules added to Nettacker 0.3.3 • Adds `ivanti_ics_cve-2023-46805` vulnerability detection module for Ivanti ICS • Adds `ivanti_epmm_cve-2023-35082` vulnerability detection module for Ivanti EPMM • Adds `wordpress_post_smtp_cve-2023-6875` vulnerability detection module for WordPress POST SMTP Mailer Plugin • Adds `citrix_last_patched_date_scan` module for scanning Citrix Gateway last patched date • Adds `html_title_scan` module for HTML title scanning • Adds `ivanti_ics_last_patched_date_scan` module for Ivanti ICS last patched date scan • Adds `ivanti_epmm_last_patched_date_scan` module for Ivanti EPMM last patched date scan Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nettacker https://github.com/OWASP/Nettacker/releases/tag/0.3.2 https://github.com/OWASP/Nettacker/releases/tag/0.3.2 Tue, 31 Oct 2023 22:45:59 GMT New modules added for Adobe Coldfusion (CVE-2023-26360), Confluence version scanning (CVE-2023-22515), Citrix (CVE-2023-4966), and specific WordPress plugin vulnerabilities. • Adds `confluence_version_scan` and `confluence_CVE-2023-22515` modules for Confluence version detection and vulnerability scanning • Adds `citrix_CVE-2023-4966` module to detect Citrix vulnerabilities Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nettacker https://github.com/OWASP/Nettacker/releases/tag/0.3.1 https://github.com/OWASP/Nettacker/releases/tag/0.3.1 Wed, 05 Jul 2023 01:28:16 GMT Nettacker 0.3.1 adds modules for CVE-2023-24488, MOVEit, HTTP status/redirect scanning, and POP3 brute-forcing • `moveit_version_scan` module to scan for Progress MOVEit instances • `http_status_scan` module for HTTP status code scanning • `http_redirect_scan` module for HTTP redirect detection Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nettacker