# D-TECT
D-TECT - Pentest the Modern Web

Author: [Shawar Khan] (https://shawarkhan.com/about/)

Disclaimer: I am not responsible for any damage done using this tool. This tool should only be used for educational purposes and for penetration testing.

###Compatibility:
* Any platform using Python 2.7

###Requirements:
* Python 2.7
* Modules(included): Colorama, BeautifulSoup

###Description:
**D-TECT** is an All-In-One Tool for Penetration Testing. This is specially programmed for Penetration Testers and Security Researchers to make their job easier, instead of launching different tools for performing different task. **D-TECT** provides multiple features and detection features which gather target information and finds different flaws in it. 

###Features:
* Sub-domain Scanning
* Port Scanning
* Wordpress Scanning
* Wordpress Username Enumeration
* Wordpress Backup Grabbing
* Sensitive File Detection
* Same-Site Scripting Scanning
* Click Jacking Detection
* Powerful XSS vulnerability scanning
* SQL Injection vulnerability scanning
* User-Friendly UI

###Usage:
python d-tect.py

#Screenshots:

###Menu:
![Menu](https://raw.githubusercontent.com/shawarkhanethicalhacker/D-TECT/master/Screenshots/menu.png)

###Banner Grabbing:
![Banner Grabbing](https://raw.githubusercontent.com/shawarkhanethicalhacker/D-TECT/master/Screenshots/banner.png)

###Click Jacking Detection:
![Click Jacking](https://raw.githubusercontent.com/shawarkhanethicalhacker/D-TECT/master/Screenshots/clickjacking.png)

###Port Scanner:
![Port Scanner](https://raw.githubusercontent.com/shawarkhanethicalhacker/D-TECT/master/Screenshots/portscan.png)

###WP Backup Grabber:
![WP Backup Grabber](https://raw.githubusercontent.com/shawarkhanethicalhacker/D-TECT/master/Screenshots/backup.png)

###Sensitive File Detection:
![File Detection](https://raw.githubusercontent.com/shawarkhanethicalhacker/D-TECT/master/Screenshots/filedetection.png)

###Cross-Site Scripting [ XSS ] Scanner:
![XSS Scanner](https://raw.githubusercontent.com/shawarkhanethicalhacker/D-TECT/master/Screenshots/xss.png)

###SQL Injection [ SQLI ] Scanner:
![SQLI Scanner](https://raw.githubusercontent.com/shawarkhanethicalhacker/D-TECT/master/Screenshots/sqli.png)

###Sub-domain Scanner:
![Sub-Domain Scanner](https://raw.githubusercontent.com/shawarkhanethicalhacker/D-TECT/master/Screenshots/subdomain.png)

###WP Username Enumeration:
![WP Username Enumeration](https://raw.githubusercontent.com/shawarkhanethicalhacker/D-TECT/master/Screenshots/usernameenumeration.png)

###Same Site Scripting detection:
![Same-Site Scripting](https://raw.githubusercontent.com/shawarkhanethicalhacker/D-TECT/master/Screenshots/samesitescripting.jpeg)

# Special Thanks To:
* Curt Smith
* Tayyab Qadir
* Mugees Ahmad
