ploit-malper 0.1.1

Post-exploitation analysis and vulnerability intelligence toolkit
Documentation

🛡️ PloitMalper

Crates.io License: MIT Rust

PloitMalper is a high-performance vulnerability post-processing and analysis toolkit written in Rust. It streamlines the transition from raw scan data to actionable exploitation intelligence by deduplicating results, enriching CVE data, and suggesting Metasploit modules.

Key Features

  • Intelligent Deduplication: Uses a specialized Rust engine to normalize and deduplicate findings using composite keys.
  • NVD CVE Enrichment: Automatically fetches CVSS scores, severities, and descriptions from the NVD API with aggressive local caching.
  • Metasploit Integration: Connects via MSF-RPC to verify existing hosts in workspaces and match findings to live sessions.
  • Automated Module Suggestions: Analyzes service banners and titles against an internal expert system to suggest relevant Metasploit modules.
  • Payload Recipe Builder: Generates ready-to-use msfvenom commands for various platforms (Windows, Linux, macOS, etc.).
  • Flexible Reporting: Produces clean, professional Markdown reports with summary tables and deep-dive findings.
  • Instant Sharing: Includes a built-in temporary file server to share reports across a network instantly.

##Prerequisites

PloitMalper leverages system utilities for lightweight HTTP transport:

  • Rust 1.70+
  • curl: Used for NVD API and MSF-RPC communication.
  • Metasploit Framework (Optional, for MSF-RPC integration).

Installation

Using Cargo (Recommended)

cargo install ploit-malper

From Source

git clone https://github.com/your-username/ploitmalper.git
cd ploitmalper
cargo build --release
cp target/release/ploit-malper /usr/local/bin/

🏁 Quick Start

1. Initial Setup

Configure your NVD API key and Metasploit RPC credentials:

ploit-malper setup

2. Process Scan Results

Feed in a JSON scan file (e.g., from VulnMalper) to deduplicate and enrich:

ploit-malper process results.json

3. Share Your Report

Host the generated report.md on a temporary local server:

ploit-malper share --port 8888

Command Reference

Command Description
process <file> Parse, deduplicate, and enrich scan results.
setup Interactive wizard for MSF-RPC and NVD API configuration.
share Start a temporary web server to serve reports (-p for port, -d for dir).
reset-config Wipe all stored credentials and local cache.

##Configuration

Configuration and caches are stored in:

  • Linux/macOS: ~/.config/ploit_malper/
  • Windows: %USERPROFILE%\.config\ploit_malper\

Contributing

Contributions are welcome! Please feel free to submit a Pull Request.

  1. Fork the Project
  2. Create your Feature Branch (git checkout -b feature/AmazingFeature)
  3. Commit your Changes (git commit -m 'Add some AmazingFeature')
  4. Push to the Branch (git push origin feature/AmazingFeature)
  5. Open a Pull Request

📜 License

Distributed under the MIT License. See LICENSE for more information.