Hi everyone,
in germany there is a quiete new tool called "hacktor".It is bundeled in the software suite "enginsight" (https://enginsight.com/en/pentesting/). It promises a kind of automatic pentest.
At first I thought, that it is a total ripoff. But after my testing I've come to the conclusion that it works amazing. It scans one or multiple IP-adresses and generates a reports which shows every open port and matches it with cve's (examples: https://enginsight.com/wp-content/uploads/Enginsight-Audit-Zielansicht-1024x598.png , https://enginsight.com/wp-content/uploads/2019/09/auditreport_warroom-1.jpg)
I've never seen any tool that comes this near to perfection like this, and i can not quiete understand how it works under the hood. Sure, nmap with vulners works similar, but not as accurate as this.
Do you guys have any clue?
[link] [comments]