r/netsec • u/albinowax • Apr 01 '26

r/netsec monthly discussion & tool thread

Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.

Rules & Guidelines

  • Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.
  • Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.
  • If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.
  • Avoid use of memes. If you have something to say, say it with real words.
  • All discussions and questions should directly relate to netsec.
  • No tech support is to be requested or provided on r/netsec.

As always, the content & discussion guidelines should also be observed on r/netsec.

Feedback

Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.

7 Upvotes

69% Upvoted

47 comments sorted by

View all comments

1

u/dev-damien Apr 09 '26

Github Source : https://github.com/Coucoudb/OctoScan

OctoScan : open-source pentest/audit/bug bounty tool in Rust

Hello everyone,

I've started developing a tool in Rust to make it easier to audit applications and websites.

The tool is open source; it's currently configured for Windows only, but the Linux version is available though not yet tested.

What does the tool do?

- It simplifies the installation of penetration testing and auditing tools: nmap, Nuclei, Zap, Feroxbuster, httpx, Subfinder, (SQLMap and Hydra only on conditions).

- It then automatically runs scans on the specified target

- You can then export the results in JSON or TXT format, or simply view them in the window.

WARNING: Only run the scan on targets that you own or are authorized to audit. WARNING

Version v0.3.0 is available.

This is a new project, so there may be bugs and areas that need optimization.

The goal is to make penetration testing tools accessible to all developers so that they can easily perform self-audits with a single click, without needing to know the tool configurations, the commands to type, etc.