OWASP Nettacker

on YouTube ↗34m

" summary

OWASP Nettacker is a Python 100% tool that runs without external binaries and can scan thousands of IPs or all subdomains of a domain, chain modules and run in CI or Docker. Modules split into scan / vulnerability / brute force, reports go to a built-in database and web UI and export CSV/JSON, usage finds default creds (admin admin on cameras) and software versions (PHP 8.3.3), and the project ships in GitHub and BlackArch with v0.4 released.

AI-written summary · about

" chapters (9)

1. 0:00Major vulnerabilities and Nettacker
2. 3:18Speaker background
3. 7:14OWASP Nettacker features
4. 12:14Live demo scanning
5. 16:44Reporting and visualization
6. 19:51Real-world impact and new version
7. 20:33Contributor journey and improvements
8. 28:51Challenges and future goals
9. 32:25Call to action

" related talks

• 54mAutomated Security Testing with OWASP NettackerSam Stepanyan · NDC Security 2026
• 26mOWASP Nettacker Project PresentationSam Stepanyan · OWASP 20th Anniversary 2021
• 56mAutomated Security Testing With OWASP NettackerSam Stepanyan · Global AppSec Dublin 2023
• 55mAutomating Security Testing with the OWTFJerod Brennen · CodeMash 2018
• 38mHackers Gonna Hack: Identifying and Fixing Vulnerabilities ProactivelyPeter Yaworski · Øredev 2018
• 01h 00mA Security Tester's ToolboxNiall Merrigan · NDC Sydney 2016
• 32mAutomating Web Application Bug HuntingJonathan Cran, Jerry Gamblin · BSidesSF 2019
• 01h 27mProactive Defense: Leveraging Hacker Tools for Early Vulnerability DetectionTobit Lill · code.talks 2023