Pocsuite3

Pocsuite3, developed by the Knownsec 404 Team, is designed for remote vulnerability testing and proof-of-concept development. It equips penetration testers and security researchers with a robust framework featuring a powerful proof-of-concept engine and various utilities for effective security assessments.

The tool supports multiple operational modes including verify, attack, and shell, allowing users to test vulnerabilities in different contexts. It integrates with services like CEye, Interactsh, Zoomeye, Shodan, and Fofa for enhanced reconnaissance and out-of-band testing capabilities.

Pocsuite3 offers console and command-line interfaces, with poc-console providing an interactive environment and pocsuite enabling scripted operations against targets specified via URLs, files, or ports. Usage is restricted to authorized security testing, as attacking targets without consent is illegal.

Pocsuite3 operates as a modular framework that executes proof-of-concept scripts against specified targets using HTTP requests with customizable headers, proxies, and authentication. It supports concurrent network requests, Docker integration for isolated PoC execution, and modes like verify (validation), attack (exploitation), and shell (interactive access). Modules leverage dorks from search engines like Zoomeye, Shodan, Fofa for target discovery, and OOB services for blind exploitation detection. Output is generated in JSON Lines format, with plugins and custom PoC paths extending functionality.