AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
- Fully automatic scanning and exploitation
- Detect network IP range without any user input
- Vulnerability detection based on service versions
- Web app vulnerability testing (LFI, XSS, SQLI)
- Web app directory busting
- Get information about vulnerabilities right from your terminal
- Automatically download exploits related to discovered vulnerabilities
- Noise mode for creating traffic on the network
- Evasion mode for stealthy scanning
- Automatically select scan types based on privilege level
- Easy to read output with rich formatting
- Specify arguments using a config file
- Send scan results via webhook or email
- Works on Windows, macOS and Linux
- Use as a module
- Use as a daemon to periodically scan the network
AutoPWN Suite includes a built-in web dashboard for managing scans from your browser.
- Multiple concurrent scans - Launch and monitor several scans at the same time
- Live terminal output - Watch nmap commands and results in real time via SSE
- Scan profiles - Save and reuse scan configurations (technique, speed, timeout, ports, evasion, custom flags)
- Scheduled scans - Set up recurring scans on a cron schedule with automatic profile loading
- Scan techniques - Choose between TCP SYN, TCP Connect, UDP, Window, ACK, FIN, Xmas, Null, Maimon and SCTP scans
- Evasion mode - Fragmented packets, spoofed source port and padded data length
- Email notifications - Get notified on scan completion with inline result summaries
- Webhook notifications - Post scan results to any webhook endpoint
- Persistent settings - All settings, profiles and schedules are saved to disk
- Configurable via environment variables - Set host, port and data directory without touching code
AutoPWN Suite uses nmap TCP-SYN scan to enumerate the host and detect the version of software running on it. After gathering enough information about the host, AutoPWN Suite automatically generates a list of keywords to search the NIST vulnerability database.
AutoPWN Suite has a very user friendly easy to read output.
git clone https://github.com/GamehunterKaan/AutoPWN-Suite.git
cd AutoPWN-Suite
pip install -r requirements.txtFor a system-wide installation on Linux (which requires root privileges), use the provided installation script. (Recommended)
# Install as root
sudo bash install.sh
# Uninstall
sudo bash uninstall.shYou can clone the repo and create a virtual environment. This installation method can be used for non-root installation in Linux.
git clone https://github.com/GamehunterKaan/AutoPWN-Suite.git
cd AutoPWN-Suite
python3 -m venv .venv
source .venv/bin/activate
pip install -r requirements.txtThe fastest way to get the web UI running. Download the docker-compose.yml file and run:
docker compose up -dThe web UI will be available at http://localhost:8080.
Edit docker-compose.yml to change host, port or data directory:
environment:
- AUTOPWN_DATA_DIR=/data # Where settings/profiles/schedules are stored
- AUTOPWN_WEB_HOST=0.0.0.0 # Listen address
- AUTOPWN_WEB_PORT=8080 # Listen portNote: Host networking (
network_mode: host) is required for nmap to discover and scan devices on your local network.
You can also run the CLI via Docker:
docker run -it --net=host gamehunterkaan/autopwn-suite -t 192.168.1.0/24 -yYou can use Google Cloud Shell.
Running with root privileges (sudo) is always recommended.
autopwn-suite -yautopwn-suite -t <target ip address>autopwn-suite -s <1, 2, 3, 4, 5>autopwn-suite -m <evade, noise, normal>For more details about usage and flags use -h flag.
autopwn-suite --daemon-installLaunch the web dashboard:
autopwn-suite --webWith custom host and port:
autopwn-suite --web --web-host 0.0.0.0 --web-port 3000
The web UI exposes a full REST API:
| Method | Endpoint | Description |
|---|---|---|
GET |
/api/scans |
List all scan jobs |
POST |
/api/scan/start |
Start a new scan |
POST |
/api/scan/stop |
Stop a running scan |
GET |
/api/hosts |
All discovered hosts (merged) |
GET |
/api/log |
Log history |
GET |
/api/events |
SSE event stream |
GET |
/api/settings |
Get all settings |
PUT |
/api/settings |
Update settings |
GET |
/api/profiles |
List scan profiles |
POST |
/api/profiles |
Create a profile |
PUT |
/api/profiles/<id> |
Update a profile |
DELETE |
/api/profiles/<id> |
Delete a profile |
GET |
/api/schedules |
List scheduled scans |
POST |
/api/schedules |
Create a schedule |
PUT |
/api/schedules/<id> |
Update a schedule |
DELETE |
/api/schedules/<id> |
Delete a schedule |
from autopwn_suite.api import AutoScanner
scanner = AutoScanner()
json_results = scanner.scan("192.168.0.1")
scanner.save_to_file("autopwn.json")You can use poetry to install dependencies and run tests.
poetry install# Run all tests with coverage
poetry run test
# Run tests without coverage
poetry run test --no-cov
# Run only unit tests
poetry run test -m unit
# Run only integration tests
poetry run test -m integration
# Run tests excluding slow tests
poetry run test -m "not slow"docker compose up --buildI would be glad if you are willing to contribute this project. I am looking forward to merge your pull request unless its something that is not needed or just a personal preference. Also minor changes and bug fixes will not be merged. Please create an issue for those and I will do it myself. Click here for more info!
You may not rent or lease, distribute, modify, sell or transfer the software to a third party. AutoPWN Suite is free for distribution, and modification with the condition that credit is provided to the creator and not used for commercial use. You may not use software for illegal or nefarious purposes. No liability for consequential damages to the maximum extent permitted by all applicable laws.
Having trouble using this tool? You can create an issue or create a discussion!