Project Overview
A penetration-testing assistant that connects port-scan results to relevant Metasploit modules, intended for use in authorized networks only.
Problem Addressed
After scanning a system, a penetration tester normally needs to review the discovered ports and services and manually search for related Metasploit modules. The project reduces this manual step by analyzing the scan results and presenting ranked suggestions.
My Role
I designed the workflow logic, connected Nmap scanning to the result-analysis stage, and developed the mechanism that matches discovered ports and services with relevant Metasploit modules and ranks the suggestions.
How It Works
Usage begins by entering the IP address of a device inside an authorized network. The tool runs Nmap to identify open ports, services, and available version information. It then analyzes the discovered data and matches it against existing Metasploit scenarios or modules, presenting ten ranked suggestions with an estimated relevance and expected effectiveness for each.
What I Implemented
- IP address entry and Nmap scan execution
- Analysis of discovered ports and services
- Matching results against Metasploit modules
- Ranking ten suggestions by relevance and expected effectiveness
Technologies Used
Current Status
In development — intended for use in authorized networks only