Skip to content

Commit 2424cdf

Browse files
committed
Updated README with latest stuff
1 parent 6b66a97 commit 2424cdf

1 file changed

Lines changed: 27 additions & 18 deletions

File tree

README.md

Lines changed: 27 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,17 @@
11
<p align="middle"><img src='https://i.imgur.com/QAbaVdU.png' /></p>
22

3-
![Python](https://img.shields.io/badge/Python-2.7-green.svg) ![TIDoS](https://img.shields.io/badge/TIDoS-v1.4-blue.svg) ![Supported OS](https://img.shields.io/badge/Supported%20OS-Linux-yellow.svg) ![License](https://img.shields.io/badge/License-GPLv3-orange.svg) ![Build](https://img.shields.io/badge/Build-0087-red.svg) ![Modules](https://img.shields.io/badge/Modules-100-blue.svg) ![Status](https://img.shields.io/badge/Build%20Status-passing-brightgreen.svg) ![Stage](https://img.shields.io/badge/Release-Stable-green.svg)
3+
![Python](https://img.shields.io/badge/Python-2.7-green.svg) ![TIDoS](https://img.shields.io/badge/TIDoS-v1.5-blue.svg) ![Supported OS](https://img.shields.io/badge/Supported%20OS-Linux-yellow.svg) ![License](https://img.shields.io/badge/License-GPLv3-orange.svg) ![Build](https://img.shields.io/badge/Build-0088-red.svg) ![Modules](https://img.shields.io/badge/Modules-89-blue.svg) ![Status](https://img.shields.io/badge/Build%20Status-passing-brightgreen.svg) ![Stage](https://img.shields.io/badge/Release-Stable-green.svg)
44

55
# The TIDoS Framework
6-
TIDoS Framework is a comprehensive web application audit framework. `let's keep this simple`
6+
TIDoS Framework is a comprehensive web-app audit framework. `let's keep this simple`
77

88
### Highlights :-
99
The main highlights of this framework is:
10-
- [x] TIDoS Framework boasts of a century of modules.
1110
- [x] A framework to cover up everything from Reconnaissance to Exploitation.
12-
- [x] Has 4 main phases, subdivided into __13 sub-phases__ consisting total of __100 modules__.
13-
- [x] Reconnaissance Phase has 36 modules of its own (including active and passive recon, information disclosure modules).
14-
- [x] Scanning & Enumeration Phase has got 28 modules (including port scans, WAF analysis, etc)
15-
- [x] Vulnerability Analysis Phase has 36 modules (including most common vulnerabilites in action).
11+
- [x] Has 4 main phases, subdivided into __13 sub-phases__ consisting total of __89 modules__.
12+
- [x] Reconnaissance Phase has 41 modules of its own (including active and passive recon, information disclosure modules).
13+
- [x] Scanning & Enumeration Phase has got 13 modules (including port scans, WAF analysis, etc)
14+
- [x] Vulnerability Analysis Phase has 35 modules (including most common vulnerabilites in action).
1615
- [x] Exploits Castle has only 1 exploit. `(purely developemental)`
1716
- [x] All four phases each have a `Auto-Awesome` module which automates every module for you.
1817
- [x] You just need the domain, and leave everything is to this tool.
@@ -86,14 +85,20 @@ TIDoS Framework presently supports the following:
8685
- Ping Enumeration `Advanced`
8786
- CMS Detection `(185+ CMSs supported)` `IMPROVED`
8887
- Advanced Traceroute `IMPROVED`
88+
- `robots.txt` and `sitemap.xml` Checker
8989
- Grab HTTP Headers `Live Capture`
90-
- Find HTTP Methods Allowed
91-
- Detect Server `IMPROVED`
90+
- Find HTTP Methods Allowed `via OPTIONS`
91+
- Detect Server behind `IMPROVED`
9292
- Examine SSL Certificate `Absolute`
93-
- `robots.txt` and `sitemap.xml` Checker
9493
- Subnets Enumeration `Class Based`
9594
- Find Shared DNS Hosts `Name Server Based`
9695
- Operating System Fingerprinting `IMPROVED`
96+
- Discover Interesting Files
97+
- Common Backdoor Locations `c99.php`
98+
- Common Backup Locations `.bak, .db`
99+
- Common Password Locations ` .pgp, .skr`
100+
- Common Proxy Path Configs. `.pac`
101+
- Common Dot Files `.htaccess, .phpinfo`
97102

98103
+ Information Disclosure
99104
- Credit Cards Disclosure `If Plaintext`
@@ -162,7 +167,7 @@ TIDoS Framework presently supports the following:
162167
+ LDAP Injection `Parameter Based`
163168
+ HTML Injection `Parameter Based`
164169
+ Bash Command Injection `ShellShock`
165-
+ Cross-Site Scripting `beta`
170+
+ Cross-Site Scripting `IMPROVED`
166171
- Cookie Value Based
167172
- Referer Value Based
168173
- User-Agent Value Based
@@ -188,7 +193,7 @@ TIDoS Framework presently supports the following:
188193
- SMTP Protocol Bruteforce
189194
- TELNET Protocol Bruteforce
190195
191-
+ String & Payload Encoder `6 Modules`
196+
+ String & Payload Encoder `6 Types`
192197

193198
- __Exploitation__ `purely developmental`
194199

@@ -205,21 +210,25 @@ TIDoS Framework presently supports the following:
205210
<img src='https://i.imgur.com/lCa42Dn.png' width='50%'></img><img src='https://i.imgur.com/xVYRZ4M.png' width='50%'></img>
206211
<img src='https://i.imgur.com/7yJmqA2.png' width='33%'> </img><img src='https://i.imgur.com/qJhYCaL.png' width='33%'> </img><img src='https://i.imgur.com/OK2gD9W.png' width='33%'> </img>
207212

213+
### Version:
214+
```
215+
v1.5
216+
```
208217

209218
### Upcoming:
210219

211220
There are some bruteforce modules to be added:
212-
- Common Backups Locations
213-
- Common Password Locations
214-
- Common Dot files `(eg. .htaccess)`
215-
- Interesting Directories
216-
- Interesting Filepaths
217-
- Lots more of OSINT
221+
- Some more of Enumeraton Techniques
222+
- Lots more of OSINT & Stuff
218223

219224
### Known Bugs:
220225

221226
This version of TIDoS is purely developmental and is presently `stable`. There are bugs in resolving the `[99] Back` at various end-points which results in blind fall-backs. Though I have added global exception handling, still, there maybe bugs out there. Also TIDoS needs to develop more on logging all info displayed on the screen `(help needed)`.
222227

228+
### Disclaimer:
229+
230+
This tool is provided a toolkit for full-fledged web-app pentesting and related vulnerability analysis. This framework is built for hunting bugs and has already found many. THEREFORE, I AM NOT RESPONSIBLE FOR THE SHIT YOU DO WITH THIS TOOL.
231+
223232
### Final Words:
224233

225234
Put this project on a watch, since it is updated frequently `(you can take a look at past commits history)`. This project is one of the best frameworks I have ever built and I would really like your constructive criticism, suggestions and help in converting this project into the best web penetration testing framework ever built `and trust me, it will be ;)`.

0 commit comments

Comments
 (0)