Loading ToolBench
A penetration testing automation system that combines vulnerability scanning (Nmap, Nuclei), RCE exploitation, webshell generation using LLM, and knowledge base retrieval for exploit development
调整优先级 - Adjusts priority score for a vulnerability knowledge slice
内网主机探活功能 - Network host discovery using Nmap with -sP -T4 arguments to scan for live hosts in a network range
内网主机端口探测功能 - Port scanning for discovered hosts using Nmap with -sS -Pn arguments on ports 80-8081
根据需要检索的 URL 生成知识库 - Generates FAISS vector store from web content for similarity search
从本地知识库生成向量存储 - Generates FAISS vector store from local JSON files
获取漏洞相关的上下文文章 - Retrieves context articles for vulnerability exploitation
安全客搜索引擎 - Searches Anquanke security knowledge base for vulnerability information
Freebuf搜索引擎 - Searches Freebuf security articles using Selenium web scraping
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 8 | <=2025-11-25 | v2 |
先知社区搜索引擎 - Searches Aliyun Xianzhi community for security articles
Github搜索引擎 - Searches GitHub repositories and code for vulnerability exploits
获取排序后的漏洞知识库切片 - Returns vulnerability knowledge slices sorted by priority score
根据漏洞名称获取搜索结果 - Searches for vulnerability exploitation articles using Tavily search API
获取webshell - Generates webshell payload using LLM based on vulnerability and request information
获取可以RCE的漏洞并生成webshell payload - Parses RCE vulnerabilities and generates webshell payloads using LLM
从本地知识库加载漏洞相关的JSON切片 - Loads vulnerability knowledge base slices from local JSON files with priority scoring
主函数 - Main orchestration function that runs Nmap scanning, vulnerability scanning with Nuclei, RCE exploitation, and webshell generation
输出RCE漏洞信息 - Outputs RCE vulnerability information from scan results
解析相似度匹配得到的内容 - Parses and combines matched documents into formatted article text
内部函数 解析请求体 - Parses HTTP request strings to extract method, URL, headers, and body
漏洞扫描 - Vulnerability scanning using Nuclei with custom templates, outputs JSON results to result/date/host/port.json
扫描内网主机的端口 - Scans a single host for open ports and collects service information