-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathREADME.md-bak
More file actions
339 lines (217 loc) · 16.6 KB
/
Copy pathREADME.md-bak
File metadata and controls
339 lines (217 loc) · 16.6 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
# Yuki Chan The Auto Pentest
The Yuki Chan is an Automated Penetration Testing tool this tool will auditing all standard security test method for you.
# WARNING
I highly recommend using this tool by using Kali Linux OS By using this tool it means you agree with terms, conditions, and risks
By using this tool you agree that
1. use for legitimate security testing
2. not for crime
3. the use of this tool solely for educational reasons only
By using this tool you agree that
1. You are willing to be charged with criminal or state law applicable by law enforcement officers and government when abused
2. the risk is borne by yourself
Thank you and happy pentest
# Change Log
- Version 1.0
> Very First Release
> Packaged Release 
# Feature
- Automated
- Intel-Gathering
- Vulnerability Analysis
- Security Auditing
- OSINT
- Tracking
- System Enumeration
- Fuzzing
- CMS Auditing
- SSL Security Auditing
- And Off Course This Tool Designed For Targetted Pentesting Too
# Modules In Yuki Chan
- Whois domain analyzer
- Nslookup
- Nmap
- TheHarvester
- Metagoofil
- DNSRecon
- Sublist3r
- Wafw00f
- WAFNinja
- XSS Scanner
- WhatWeb
- Spaghetti
- WPscan
- WPscanner
- WPSeku
- Droopescan ( CMS Vulnerability Scanner Wordpress, Joomla, Silverstripe, Drupal, And Moodle)
- SSLScan
- SSLyze
- A2SV
- Dirsearch
# How To Use It ?
this tool is only designed for Linux OS so if you are not using Linux OS im sorry dude but if you have Android Smarphone or Tablet you can run this tool via Termux or GNURoot Debian
so Are You Ready ??
Let's Start It
# Install Without Git Clone Command From Your Terminal
Yuki Chan Package v1.0 : 
# Install From Git Clone Follow This Instruction Below
Ok in my recent OS (Kali Linux) has been already installed this module
- Nmap
- Wafw00f
- WPScan
- SSLScan
- SSLyze
So if your OS Doesn't Have it
you can install it first here i give you resource
- Nmap
Red Hat, Fedora, Mandrake, and Yellow Dog Linux with Yum
> yum install nmap
Debian Linux and Derivatives such as Ubuntu
> apt-get install nmap
more info : https://nmap.org
- Wafw00f
> git clone https://github.com/EnableSecurity/wafw00f.git
> cd wafw00f
> python setup.py install
or simple way
> pip install wafw00f
- WPScan
Installing dependencies on Ubuntu
> sudo apt-get install libcurl4-openssl-dev libxml2 libxml2-dev libxslt1-dev ruby-dev build-essential libgmp-dev zlib1g-dev
Installing dependencies on Fedora
> sudo dnf install gcc ruby-devel libxml2 libxml2-devel libxslt libxslt-devel libcurl-devel patch rpm-build
Installing dependencies on Arch Linux
> pacman -Syu ruby
> pacman -Syu libyaml
Installing manually (not recommended)
> git clone https://github.com/wpscanteam/wpscan.git
> cd wpscan
> sudo gem install bundler && bundle install --without test
more info https://github.com/wpscanteam/wpscan if you cannot install WPScan don't worry just Skip it i have alternative wpscan module for you
- SSLScan
> more info about installing this module
> https://github.com/rbsec/sslscan
- SSLyze :
> git clone https://github.com/nabla-c0d3/sslyze.git
> cd sslyze
> pip install -r requirements.txt --target ./lib
or simple way
> pip install --upgrade setuptools
> pip install sslyze
if Nmap, Wafw00f, WPScan, SSLScan, SSLyze not installed in your OS maybe this tool not really work completely so if Nmap, Wafw00f, WPScan, SSLScan, SSLyze already installed you can next.
Q : can i skip using this tool without Nmap, Wafw00f, WPScan, SSLScan, SSLyze installed in my OS ?
A : yes you can do it but not really work completely
Ok next this is step by step for preparation for first time use
First Things First Clone This Tool
> git clone https://github.com/Yukinoshita47/Yuki-Chan-The-Auto-Pentest.git
Get inside of directory
> cd Yuki-Chan-The-Auto-Pentest
Give Chmod 777 Access Level
> chmod 777 wafninja joomscan install-perl-module.sh yuki.sh
> chmod 777 Module/WhatWeb/whatweb
And Then Install Python Module
> pip install -r requirements.txt
After That Install Perl Module
> ./install-perl-module.sh
preparation finished now run this tool and happy pentest
Run This Tool
> ./yuki.sh
# Media Review
- Hack4Net : http://www.hack4.net/2017/09/yuki-chan-automate-pentest-tool.html
- Kitploit : http://www.kitploit.com/2017/09/yuki-chan-automate-pentest-tool.html
- HackerTor : https://hackertor.com/2017/09/16/yuki-chan-automate-pentest-tool/
- KopiTamplok : http://www.kopitamplok.ml/2017/09/yuki-automated-pentest-tool.html?m=1
- Hacking Reviews : https://www.hacking.reviews/2017/09/yuki-chan-automate-pentest-tool.html
- Новости информационной безопасности : http://dfir.pro/index.php?link_id=77086
- Sapsi Security Services : http://sapsi.org/yuki-chan-automate-pentest-tool/
- r00t_1337 : https://r00t1337.blogspot.co.id/2017/09/the-yuki-chan-auto-pentest-tools.html
- Casper Crew : http://www.casper-crew.ml/2017/09/tools-pentest-yuki-chan-buatan-team.html
- haxf4rall : http://haxf4rall.com/2017/09/19/yuki-chan-automate-pentest-tool/
- pax0r : https://pax0r.com/feed-items/yuki-chan-automate-pentest-tool/
- Hacking Land : https://www.hacking.land/2017/09/yuki-chan-automate-pentest-tool.html
- Kali Linux Hack : http://www.kalilinuxhack.com/2017/09/pentest-automatically-using-yuki-chan-kali-linux-2017.html
- Russian Hacker Forum : https://codeby.net/forum/threads/yuki-chan-the-auto-pentest.60528/
- Python Trending Twitter : https://twitter.com/pythontrending/status/909404727410135040
- Yeahhub : https://www.yeahhub.com/yuki-chan-automated-penetration-testing-tool-kali-linux-2017-2/
- Darknet.org.uk : https://www.darknet.org.uk/2017/10/yuki-chan-automated-penetration-testing-tool/
- getoto : https://noise.getoto.net/2017/10/01/yuki-chan-automated-penetration-testing-tool/
- IT Security News : https://www.itsecuritynews.info/yuki-chan-automated-penetration-testing-tool/
- GB Hacker : https://gbhackers.com/yuki-chan-automated-penetration-testing/
- Isec.ne.jp Slide Powerpoint : https://isec.ne.jp/wp-content/uploads/2017/09/47Yuki-Chan-Tool.pdf
- Tuicool : http://www.tuicool.com/articles/yUBfEbV
- Kambleganesh : https://kambleganesh775.blogspot.co.id/2017/09/yuki-chan-automate-pentest-tool-of-kali.html
- CW Enterprise : https://www.cwenterprises.co.uk/yuki-chan-automated-penetration-testing-and-auditing-tool-detailed-explanation/
- dieiot : http://dieiot.blogspot.co.id/2017/09/kali-linux-automated-pentesting-yuki.html
- Russian Information Security Squad : http://itsecforu.ru/2017/10/04/yuki-chan-%D0%B8%D0%BD%D1%81%D1%82%D1%80%D1%83%D0%BC%D0%B5%D0%BD%D1%82-%D0%B0%D0%B2%D1%82%D0%BE%D0%BC%D0%B0%D1%82%D0%B8%D1%87%D0%B5%D1%81%D0%BA%D0%BE%D0%B3%D0%BE-%D1%82%D0%B5%D1%81%D1%82%D0%B8%D1%80/
- Israel Microsoft Blog Community : https://blogs.microsoft.co.il/yuval14/2017/10/03/kali-pentesting-yuki-chan-automated-penetration-testing-and-auditing-tool-detailed-explanation/
- Pro Defence : http://www.prodefence.org/2017/09/18/yuki-chan-automate-pentest-tool/
- Sinister.ly : https://sinister.ly/Thread-Yuki-Chan-Automated-Penetration-Testing-Tool?pid=779447#pid779447
- BHF.io : https://bhf.io/threads/435621/
- Chinese Github List : https://github.com/We5ter/Scanners-Box
- Security Online : https://securityonline.info/yuki-chan-auto-pentest-automate-penetration-testing-tool/
- ez5414 : http://ez5414.blogspot.co.id/2017/09/yuki-chan-automate-pentest-tool.html?m=1
- No Hacking No Life : http://www.nohackingnolife.ga/2017/09/yuki-chan-cong-cu-pentest-tu-ong-2017.html?m=1
- Dennis nadeau complaint : https://www.dennisnadeaucomplaint.com/yuki-chan-automated-penetration-testing-tool/
- Ctolib : https://www.ctolib.com/article/releases/62254
- Pentest toolz : http://pentesttoolz.com/2017/10/06/yuki-chan-automated-penetration-testing-kali-linux-2017-2/
- Shadow Hacker Team : http://www.shadowhackr.com/2017/09/yuki-chan-automate-pentest-tool.html
# Video Review
- Yuki Chan - Automate Pentest Tool of Kali Linux 2017.1 ✔ : https://www.youtube.com/watch?v=6HrRdo-z2Mc
- Yuki Chan The Auto Pentest Tool (v0.1.0) - Install And Practice From Kali Linux 2017.1 : https://youtu.be/oLl7ox22yu4
- Yuki Chan Automate Pentest Tool Of Kali Linux 2017 | Secure Your Website By Yuki Chan Auto V-Scanner : https://youtu.be/mkXSZcZhxyI
- Yuki Chan The Auto Pentest ToolKit - Web Security Testing & Vulnerability Testing : https://youtu.be/ZGkIkYuUgxo
- Yuki Chan The Auto Pentest ~ Tools pengujian keamanan ! WATCH NOW ! ! : https://youtu.be/smQ2sMNVM-o
- Yuki Chan All standard security test method for you. (Parrot Security OS Version) : https://youtu.be/7FO81lRHeEM
- Kali Linux 2017.1 - Yuki Chan - Automate Pentest Tool : https://youtu.be/uv-aym3uaBI
- Yuki Chan The Auto Pentest --: Very Powerful TOOL ( Kali Linux ) . Top Rated Linux Tool On Github: https://www.youtube.com/watch?v=yLmXij6WjQk
- Yuki Chan - Automated Penetration Testing - Kali Linux 2017.2 : https://www.youtube.com/watch?v=6GBBM-VtlF0
- Yuki Chan Kali Linux Automate PenTesting tool : https://www.youtube.com/watch?v=L6KxD8QDCVc
# ScreenShoot Preview
this is my live pentest off course legal pentesting
# Greetings
Im really say special thank's to Allah, My Lovely Wife, My Family, And all contributor in this project thanks for developer of module, media reviewer, video reviewer, and All part of this project.
Hope You Guys Enjoy This Tool And As Always Have Nice Day
Regard
From : Yukinoshita 47
Team : Garuda Security Hacker
Email : yukinoshita47@gmail.com
Web : http://www.garudasecurityhacker.org