badKarma is a python3 GTK+ network infrastructure penetration testing toolkit.

badKarma aim to help the tester in all the penetration testing phases (information gathering, vulnerability assessment,exploitation,post-exploitation and reporting). It allow the tester to save time by having point-and-click access to their toolkit and interacte with them through GUIs or Terminals, also every task is logged under a sqlite database in order to help during the reporting phase or in a incident response scenario.

It is also available a proxychains switch that let everything go through proxies, and last but not least, every commands can be adjusted before the execution by disabling the "auto-execute" checkbox.

badKarma is licensed under GNU GPL version 3.

Database

The database by default is located inside the "/tmp" directory, this means that you have to save it in a different location before rebooting your computer.

It contains all the information gained during the activity, real-time updated, it is used like a session file, and it can be exported or/and imported.

Targets

It is possible to add target and scan them with nmap or import an nmap XML report, also some defaults scan profiles are already available as well.

By defaults all the nmap output are stored inside the "/tmp" directory , then the output is imported in the sqlite database and deleted.

Extensions

badKarma is modular, the extensions are full-interactive and they allow the tester to tune tasks options, also every extension output is logged under the database and can be exported as a raw txt from the "Logs" tab.

Extensions can be found under the "extension" directory,current available extensions are:

# apt install python3-pip python3-gi phantomjs gir1.2-gtk-vnc-2.0 ffmpeg `

$ git clone https://github.com/r3vn/badKarma.git

# cd badKarma
 # pip3 install -r requirements.txt

$ chmod +x badkarma.py
 $ ./badkarma.py

Download badKarma