DOKK / manpages / debian 12 / pocsuite3 / pocsuite.1.en
POCSUITE(1) General Commands Manual POCSUITE(1)

pocsuite3 - open-sourced remote vulnerability testing framework.

Usage of pocsuite3 for attacking targets without prior mutual consent is illegal. pocsuite3 is for security testing purposes only.

pocsuite -h[elp]
pocsuite [options]

pocsuite3 is an open-sourced remote vulnerability testing and proof-of-concept development framework developed by the Knownsec 404 Team. It comes with a powerful proof-of-concept engine, many nice features for the ultimate penetration testers and security researchers.

show this help message and exit
Show program's version number and exit
Update Pocsuite3
Create a PoC template
Verbosity level: 0-6 (default 1)

At least one of these options has to be provided to define the target(s)
Target URL/CIDR (e.g. "http://www.site.com/vuln.php?id=1")
Scan multiple targets given in a textual file (one per line)
add additional port to each target (e.g. 8080,8443)
Load POC file from local or remote from seebug website
Filter PoC by keyword, e.g. ecshop
Load options from a configuration INI file

Pocsuite running mode options
Run poc with verify mode
Run poc with attack mode
Run poc with shell mode

Network request options
HTTP Cookie header value
HTTP Host header value
HTTP Referer header value
HTTP User-Agent header value (default random)
Use a proxy to connect to the target URL (protocol://host:port)
Proxy authentication credentials (name:password)
Seconds to wait before timeout connection (default 10)
Time out retrials times (default 0)
Delay between two request of one thread
Extra headers (e.g. "key1: value1\nkey2: value2")

Account options
CEye token
Interactsh server to use (default "interact.sh")
Authentication token to connect protected interactsh server
Seebug token
ZoomEye token
Shodan token
fofa user
fofa token
quake token
hunter token
Censys uid
Censys secret

Modules options
Zoomeye dork used for search
Zoomeye dork used for search
Shodan dork used for search
Fofa dork used for search
Quake dork used for search
Hunter dork used for search
Censys dork used for search
Max page used in search API
search type used in search API, web or host
Seebug keyword used for search
Seebug SSVID number for target PoC
Connect back host for target PoC in shell mode
Connect back port for target PoC in shell mode
Enable TLS listener in shell mode
Compare popular web search engines
Whether dork is in base64 format

Optimization options
Output file to write (JSON Lines format)
Load plugins to execute
User defined poc scripts path
Max number of concurrent network requests (default 150)
Automatically choose defalut choice without asking
Check install_requires
Activate quiet mode, working without logger
Hiden sensitive information when published to the network
use scapy capture flow
export rules, default export request and response
only export request rule
Specify the name of the export rule file

definition options for PoC
Show all definition options

Run poc with verify mode, poc will be only used for vulnerability scanning.

% pocsuite -r poc_example.py -u http://example.com/ --verify

Run poc with attack mode, and it may allow hackers/researchers break into labs.

% pocsuite -r poc_example.py -u http://example.com/ --attack

Run poc with shell mode, if executed successfully, pocsuite will drop into interactive shell.

% pocsuite -r poc_example.py -u http://example.com/ --shell

Using multiple threads, the default number of threads is 150.

% pocsuite -r poc_example.py -u http://example.com/ --verify --threads 20

Scan multiple targets given in a textual file.

% pocsuite -r poc_example.py -f url.txt --verify

The full documentation for pocsuite3 is maintained at:
https://github.com/knownsec/pocsuite3/blob/master/docs/USAGE.md

This manual page documents pocsuite3 version 1.9.6

(c) 2014-2022 by Knownsec 404 Team
<404-team@knownsec.com>

This program is free software; you may redistribute and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; Version 2 with the clarifications and exceptions described below. This guarantees your right to use, modify, and redistribute this software under certain conditions. If you wish to embed pocsuite3 technology into proprietary software, we sell alternative licenses (contact 404-team@knownsec.com).

Manual page started by Tian Qiao <abcnsxyz@gmail.com>

July 2022 Manual page for pocsuite