Skip to content

4. Operating the Python Tool Suite

Trapper edited this page May 18, 2026 · 3 revisions

🐍 Operating the Custom Python Tool Suite

Welcome to your development hub. All custom offensive scripts live inside the 04-Source-Code/ master directory tree and have been upgraded to support dynamic target input switching.

📡 1. Network Reconnaissance (Recon-Scanners/)

This framework houses tools dedicated to discovery mapping and service fingerprinting.

  • ping_sweeper.py - Discovers live target IP addresses on your isolated 10.0.2.0/24 subnet.
  • advanced_scanner.py - Audits open TCP ports and extracts service banners.

How to Run:

# Move to the scanner directory inside your Kali Linux terminal
cd ~/Hacking-Playground-/04-Source-Code/Recon-Scanners/

# OPTION A: Run interactively (The script will explicitly prompt you to input a target target)
python3 advanced_scanner.py

# OPTION B: Pass any custom target IP on-the-fly directly behind the script file execution name
python3 advanced_scanner.py 10.0.2.4

🕸️ 2. Web Application Exploitation (Web-Exploitation/)

This framework targets vulnerabilities found in web layers like your OWASP target instance.

  • directory_bruter.py - Brute-forces web roots using wordlists to discover hidden endpoints and panels.
  • sqli_tester.py - Probes targeted HTTP query parameters for input-handling flaws using quotation mark telemetry payloads.
  • xss_hunter.py - A form-field vulnerability scanner that automatically tests HTTP variables for input-sanitization vulnerabilities.

How to Run:

# Move to the web exploitation directory tier inside Kali Linux
cd ~/Hacking-Playground-/04-Source-Code/Web-Exploitation/

# Run the web path discovery engine with an interactive user prompt
python3 directory_bruter.py

# Specify an explicit target URL on-the-fly via command-line arguments
python3 directory_bruter.py 10.0.2.5/mutillidae/

Clone this wiki locally