-
-
Notifications
You must be signed in to change notification settings - Fork 802
Developers
We gladly support and appreciate anyone is interested to contribute to the OWASP Nettacker Project. Overall developers may focus on developing core framework, modules or payloads, language libraries and media. After reading this document you should be able to get the basic knowledge to start developing. Please consider that we are using PEP8 python code style and using Codacy to figure the code quality. In addition, GitHub Actions will check your PR automatically on several Python versions (2.x, 3.x). Before sending your PR, make sure you added code-based documentation to your codes and read the PR template. If you use any code/library/module with a license, add the license into external license file.
These are the guidelines you need to keep in mind while contributing:
- The code must have been thoroughly tested in your local development environment.
- The code must be both python 2 and 3 compatible.
- The code must follow the PEP8 styling guidelines with a 4 spaces indentation.
- Each pull request should have only one commit related to each update.
- Please open different pull requests for individual updates.
- The commit messages should be meaningful.
- Be sure to add the concerned documentation for the added feature.
- The branch in the pull request must be up-to-date with the
masterof Upstream. - Please follow the clean code guidelines 1 and 2.
For any doubts regarding the guidelines please contact the project leaders.
Developers always could be aware of the OWASP Nettacker project roadmap by checking
- 1- Project Management Page https://github.com/OWASP/Nettacker/projects
- 2- Issues Page https://github.com/OWASP/OWASP-Nettacker/issues
To contribute OWASP Nettacker. Existing Issues, Tasks, Code Style Issues are great opportunity to start developing the OWASP Nettacker.
We appreciated all kind of media to demonstrate the OWASP Nettacker in any language and environment. It is a great activity to help us grow our framework and get more publicity. Currently, we collected a few media on Media page. Feel free to post your Media on this page.
OWASP Nettacker is using multi-language libraries (default English) to create a better user experience. Currently we are supporting Greek/el, French/fr, English/en, Dutch/nl, Pashto/ps, Turkish/tr, German/de, Korean/ko, Italian/it, Japanese/ja, Persian/fa, Armenian/hy, Arabic/ar, Chinese(Simplified)/zh-cn, Vietnamese/vi, Russian/ru, Hindi/hi, Urdu/ur, Indonesian/id, Spanish/es, Hebrew/iw) languages. If you are an expert in one these languages, It would be a great favor to contribute to one of these. If any language you want to contribute is not listed, feel free to follow the below steps to add it.
In some cases language library does not exist, you can create a new file and add it to the framework.
- 1- Goto
lib/messages - 2- Name your message library e.g.
fa.yaml - 3- Copy the default language lib (
en.yaml) and start your translation. - 4- Please notice that you should not change the key-value like
scan_started,optionsand etc. you just need to modify the Values.
To contribute to the existing libraries, You may go to lib/messages select the file you want to contribute and
- 1- Translate English messages to the selected language.
- 2- Compare the language library with English library and add new messages to this library and translate them.
- 3- Modify the translated messages to better translations.
Modules exist in path /modules/module_category. Currently, we have three categories (scan, brute, vuln). if you need to add more just create a directory with a name! To start a new module you should understand what kind of protocol you want to use. The list of protocols and module functionalities are in core/module_protocols. To understand how they work read the below example.
info: # this section is to store information about module
name: dir_scan
author: OWASP Nettacker Team
severity: 3
description: Directory, Backup finder
reference: https://www.zaproxy.org/docs/alerts/10095/
profiles: # module will be added to below profiles and user can use --profile scan to run this and other modules in same profile
- scan
- http
- backup
- low_severity
payloads: # this section stores the payloads
- library: http # the time of library, you can use multiple library if needed as an array
verify: false
timeout: 3
cert: ""
stream: false
proxies: ""
steps:
- method: get # type of request
headers: # headers
User-Agent: "{user_agent}" # this will be replaced by default user-agent or user input
URL: # URL is the input we want to fuzz
nettacker_fuzzer:
input_format: "{{schema}}://{target}:{{ports}}/{{urls}}" # format of url
prefix: ""
suffix: ""
interceptors:
data:
urls:
- "administrator"
- "admin"
- "old"
- "_vti_bin"
- "_private"
- "cgi-bin"
- "public_html"
- "images"
schema:
- "http"
- "https"
ports:
- 80
- 443
response: # response will check if the payload were success
condition_type: or # could be and/or
conditions: # could be in header/content/status_code/reason/timeresponse
status_code:
regex: 200|403|401
reverse: false # if true, it will reverse the regex
The http protocol uses exactly the same inputs as the python requests library. if we want to convert the yaml code to python requests it will be:
In [5]: import requests
In [6]: lib=requests
In [7]: lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="https://www.owasp.org:443/url", headers={'User-Agent': 'whatever'})The inputs such as ports will be replaced by user input and 80,443 is just a default value to hold in case the user did not enter any ports. you can see all user inputs from config.py.
Any value that comes in an array in the YAML files will be treated as a loop and it will regenerate the request until all loops are finished.
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="https://www.owasp.org:443/url1", headers={'User-Agent': 'whatever'})
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="https://www.owasp.org:443/url2", headers={'User-Agent': 'whatever'})
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="https://www.owasp.org:443/url3", headers={'User-Agent': 'whatever'})
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="https://www.owasp.org:443/url4", headers={'User-Agent': 'whatever'})or
dynamics: http, https, url1, url2 , url3, url4, port 80, port 443
# https
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="https://www.owasp.org:443/url1", headers={'User-Agent': 'whatever'})
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="https://www.owasp.org:443/url2", headers={'User-Agent': 'whatever'})
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="https://www.owasp.org:443/url3", headers={'User-Agent': 'whatever'})
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="https://www.owasp.org:443/url4", headers={'User-Agent': 'whatever'})
# http
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="http://www.owasp.org:80/url1", headers={'User-Agent': 'whatever'})
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="http://www.owasp.org:80/url2", headers={'User-Agent': 'whatever'})
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="http://www.owasp.org:80/url3", headers={'User-Agent': 'whatever'})
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="http://www.owasp.org:80/url4", headers={'User-Agent': 'whatever'})
# https on 80
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="https://www.owasp.org:80/url1", headers={'User-Agent': 'whatever'})
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="https://www.owasp.org:80/url2", headers={'User-Agent': 'whatever'})
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="https://www.owasp.org:80/url3", headers={'User-Agent': 'whatever'})
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="https://www.owasp.org:80/url4", headers={'User-Agent': 'whatever'})
# http on 443
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="http://www.owasp.org:443/url1", headers={'User-Agent': 'whatever'})
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="http://www.owasp.org:443/url2", headers={'User-Agent': 'whatever'})
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="http://www.owasp.org:443/url3", headers={'User-Agent': 'whatever'})
lib.get(verify=False, timeout=3, cert="", stream=False, proxies="", url="http://www.owasp.org:443/url4", headers={'User-Agent': 'whatever'})
go nuts!