toha3ee

Local & network security assessment framework written in Go. Ten module categories spanning recon, enumeration, OSINT, auth, web, switch, wireless, MITM and post-exploitation, driven from an interactive REPL.

Capabilities

  • MITM - ARP, DHCP, DNS, IPv6 and LLMNR poisoning with inline interception
  • Espionage, inline HTTP/HTTPS interception, credential harvesting and SSL stripping
  • Auth, relay, signing checks, spraying, brute force and AS-REP
  • Recon, network discovery and fingerprinting that ranks attack vectors
  • OSINT - DNS, WHOIS, CT logs, ASN, Shodan, buckets, wayback and GitHub dorks
  • Enumeration - SMTP, SNMP, LDAP, NFS and SMB users plus IPv6 host sweeps
  • Web, web-layer assessment on top of recon fingerprints
  • Switch, layer-2 exploitation: flooding, port stealing, VLAN hopping, STP/CDP abuse
  • Wireless - 802.11 attacks: scanning, deauth, handshake capture, evil twin, PMKID and KARMA
  • Post, reporting and session tooling on top of the in-memory store

Install

  • Linux / macOS: curl -fsSL https://raw.githubusercontent.com/qyvora/qyvora-toha3ee/main/scripts/install.sh | sh
  • Windows (PowerShell): irm https://raw.githubusercontent.com/qyvora/qyvora-toha3ee/main/scripts/install.ps1 | iex
  • From a checkout: make install