11<p align =" middle " ><img src =' https://i.imgur.com/QAbaVdU.png ' /></p >
22
3- ![ Python] ( https://img.shields.io/badge/Python-2.7-green.svg ) ![ TIDoS] ( https://img.shields.io/badge/TIDoS-v1.4 -blue.svg ) ![ Supported OS] ( https://img.shields.io/badge/Supported%20OS-Linux-yellow.svg ) ![ License] ( https://img.shields.io/badge/License-GPLv3-orange.svg ) ![ Build] ( https://img.shields.io/badge/Build-0087 -red.svg ) ![ Modules] ( https://img.shields.io/badge/Modules-100 -blue.svg ) ![ Status] ( https://img.shields.io/badge/Build%20Status-passing-brightgreen.svg ) ![ Stage] ( https://img.shields.io/badge/Release-Stable-green.svg )
3+ ![ Python] ( https://img.shields.io/badge/Python-2.7-green.svg ) ![ TIDoS] ( https://img.shields.io/badge/TIDoS-v1.5 -blue.svg ) ![ Supported OS] ( https://img.shields.io/badge/Supported%20OS-Linux-yellow.svg ) ![ License] ( https://img.shields.io/badge/License-GPLv3-orange.svg ) ![ Build] ( https://img.shields.io/badge/Build-0088 -red.svg ) ![ Modules] ( https://img.shields.io/badge/Modules-89 -blue.svg ) ![ Status] ( https://img.shields.io/badge/Build%20Status-passing-brightgreen.svg ) ![ Stage] ( https://img.shields.io/badge/Release-Stable-green.svg )
44
55# The TIDoS Framework
6- TIDoS Framework is a comprehensive web application audit framework. ` let's keep this simple `
6+ TIDoS Framework is a comprehensive web-app audit framework. ` let's keep this simple `
77
88### Highlights :-
99The main highlights of this framework is:
10- - [x] TIDoS Framework boasts of a century of modules.
1110- [x] A framework to cover up everything from Reconnaissance to Exploitation.
12- - [x] Has 4 main phases, subdivided into __ 13 sub-phases__ consisting total of __ 100 modules__ .
13- - [x] Reconnaissance Phase has 36 modules of its own (including active and passive recon, information disclosure modules).
14- - [x] Scanning & Enumeration Phase has got 28 modules (including port scans, WAF analysis, etc)
15- - [x] Vulnerability Analysis Phase has 36 modules (including most common vulnerabilites in action).
11+ - [x] Has 4 main phases, subdivided into __ 13 sub-phases__ consisting total of __ 89 modules__ .
12+ - [x] Reconnaissance Phase has 41 modules of its own (including active and passive recon, information disclosure modules).
13+ - [x] Scanning & Enumeration Phase has got 13 modules (including port scans, WAF analysis, etc)
14+ - [x] Vulnerability Analysis Phase has 35 modules (including most common vulnerabilites in action).
1615- [x] Exploits Castle has only 1 exploit. ` (purely developemental) `
1716- [x] All four phases each have a ` Auto-Awesome ` module which automates every module for you.
1817- [x] You just need the domain, and leave everything is to this tool.
@@ -86,14 +85,20 @@ TIDoS Framework presently supports the following:
8685 - Ping Enumeration `Advanced`
8786 - CMS Detection `(185+ CMSs supported)` `IMPROVED`
8887 - Advanced Traceroute `IMPROVED`
88+ - `robots.txt` and `sitemap.xml` Checker
8989 - Grab HTTP Headers `Live Capture`
90- - Find HTTP Methods Allowed
91- - Detect Server `IMPROVED`
90+ - Find HTTP Methods Allowed `via OPTIONS`
91+ - Detect Server behind `IMPROVED`
9292 - Examine SSL Certificate `Absolute`
93- - `robots.txt` and `sitemap.xml` Checker
9493 - Subnets Enumeration `Class Based`
9594 - Find Shared DNS Hosts `Name Server Based`
9695 - Operating System Fingerprinting `IMPROVED`
96+ - Discover Interesting Files
97+ - Common Backdoor Locations `c99.php`
98+ - Common Backup Locations `.bak, .db`
99+ - Common Password Locations ` .pgp, .skr`
100+ - Common Proxy Path Configs. `.pac`
101+ - Common Dot Files `.htaccess, .phpinfo`
97102
98103 + Information Disclosure
99104 - Credit Cards Disclosure `If Plaintext`
@@ -162,7 +167,7 @@ TIDoS Framework presently supports the following:
162167 + LDAP Injection `Parameter Based`
163168 + HTML Injection `Parameter Based`
164169 + Bash Command Injection `ShellShock`
165- + Cross-Site Scripting `beta `
170+ + Cross-Site Scripting `IMPROVED `
166171 - Cookie Value Based
167172 - Referer Value Based
168173 - User-Agent Value Based
@@ -188,7 +193,7 @@ TIDoS Framework presently supports the following:
188193 - SMTP Protocol Bruteforce
189194 - TELNET Protocol Bruteforce
190195
191- + String & Payload Encoder `6 Modules `
196+ + String & Payload Encoder `6 Types `
192197
193198- __ Exploitation__ ` purely developmental `
194199
@@ -205,21 +210,25 @@ TIDoS Framework presently supports the following:
205210<img src =' https://i.imgur.com/lCa42Dn.png ' width =' 50% ' ></img ><img src =' https://i.imgur.com/xVYRZ4M.png ' width =' 50% ' ></img >
206211<img src =' https://i.imgur.com/7yJmqA2.png ' width =' 33% ' > </img ><img src =' https://i.imgur.com/qJhYCaL.png ' width =' 33% ' > </img ><img src =' https://i.imgur.com/OK2gD9W.png ' width =' 33% ' > </img >
207212
213+ ### Version:
214+ ```
215+ v1.5
216+ ```
208217
209218### Upcoming:
210219
211220There are some bruteforce modules to be added:
212- - Common Backups Locations
213- - Common Password Locations
214- - Common Dot files ` (eg. .htaccess) `
215- - Interesting Directories
216- - Interesting Filepaths
217- - Lots more of OSINT
221+ - Some more of Enumeraton Techniques
222+ - Lots more of OSINT & Stuff
218223
219224### Known Bugs:
220225
221226This version of TIDoS is purely developmental and is presently ` stable ` . There are bugs in resolving the ` [99] Back ` at various end-points which results in blind fall-backs. Though I have added global exception handling, still, there maybe bugs out there. Also TIDoS needs to develop more on logging all info displayed on the screen ` (help needed) ` .
222227
228+ ### Disclaimer:
229+
230+ This tool is provided a toolkit for full-fledged web-app pentesting and related vulnerability analysis. This framework is built for hunting bugs and has already found many. THEREFORE, I AM NOT RESPONSIBLE FOR THE SHIT YOU DO WITH THIS TOOL.
231+
223232### Final Words:
224233
225234Put this project on a watch, since it is updated frequently ` (you can take a look at past commits history) ` . This project is one of the best frameworks I have ever built and I would really like your constructive criticism, suggestions and help in converting this project into the best web penetration testing framework ever built ` and trust me, it will be ;) ` .
0 commit comments