Automated Security Testing with OWASP Nettacker
summary
OWASP Nettacker is a Python scanning framework that runs scans across IP ranges, domains and subdomains, ships 120+ modules for port, vuln and brute‑force checks, and stores results in a built-in database and web UI with HTML/CSV/JSON exports. It runs from the CLI, as a Docker image or a GitHub Action and exposes an API, detects default credentials (7 of 4,000 cameras in one engagement), finds MOVEit/Exchange instances, supports scan‑comparison deltas, and currently requires Python 3.11–3.12 (3.13 incompatible).
AI-written summary · about
chapters (10)
- 0:00OWASP Nettacker intro
- 3:09Project origins and adoption
- 8:43What is Nettacker
- 17:48Live demo
- 28:24Internal network scanning
- 39:22Web UI and API features
- 43:12Real-world use cases
- 47:02GitHub Actions integration
- 49:28Getting started
- 52:16Future plans
related talks
56mAutomated Security Testing With OWASP Nettacker
34mOWASP Nettacker
26mOWASP Nettacker Project Presentation
55mAutomating Security Testing with the OWTF
27mHow to Start Security Testing Without Fear
50mScaling Security Assessment at the Speed of DevOps
36mContinuous Security Testing with OWASP secureCodeBox in Kubernetes
19mPenetration Testing