Port scanning
Advanced scanning with service and version detection on the target host.
./0ctopus.py
Infosec swiss army knife0ctopus
A pentesting and network analysis kit built by Underc0de Labs. It brings together port scanning, subdomain enumeration, crawling, packet capture and WiFi tools in a single Python CLI, by interactive menu or by command.
cat about.txt
What is 0ctopus?
0ctopus is an infosec swiss army knife: a single Python tool that bundles several pentesting and analysis utilities. You can use it through its interactive menu or call each function as a direct command, and results are saved neatly in the output/.
It was born at Underc0de Labs, the community’s development space, with the same philosophy as always: free knowledge, open source and learning by doing. It is MIT-licensed software, so you can read it, modify it and contribute.
ls tools/
Included tools
Each module handles one recon or analysis task. Use them on their own or chained from the menu.
Subdomain enumeration
Discovers subdomains by combining crt.sh queries with a local wordlist.
Directory crawling
Crawls internal links (dirb) with configurable depth and formatted output.
Vulnerability check
A quick review of common weaknesses on the configured base URL.
Packet capture
A network sniffer that exports captured traffic to a .pcap file.
IP geolocation
Resolves the approximate location and network data of an IP address.
WHOIS
Looks up the registration and ownership data of a domain.
Admin finder
Locates common admin panels and paths on a site.
WiFi scanning
Lists the wireless networks in range and their signal data.
Handshake capture
Captures the WPA/WPA2 handshake of a target network for analysis.
Handshake cracking
Attempts to recover the key from a captured handshake.
cd ~/ && git clone
Installation
Clone the repository, create a virtual environment (optional but recommended) and install the dependencies. Before running any command, edit config.py and set the HOST and the URL_BASE of your target.
On Windows, for packet capture install Npcap in WinPcap-compatible mode and open the terminal as Administrator.
Open the repository$ git clone https://github.com/underc0delabs/0ctopus.git $ cd 0ctopus $ python3 -m venv env && source env/bin/activate $ pip install -r requirements.txt $
0ctopus.py --help
Usage
With no arguments it opens the interactive menu. With a command it runs that function directly and saves the output to output/.
$ python 0ctopus.py 0ctopus · Underc0de Hacking Tool [1] scan-ports [2] vuln-check [3] enum-subdomains [4] dirb [5] sniff-packets [6] geoip / whois ... $
$ python 0ctopus.py scan-ports $ python 0ctopus.py enum-subdomains $ python 0ctopus.py dirb --max-depth 3 --verbose $ python 0ctopus.py sniff-packets $
Responsible use
0ctopus is a tool for pentesting and learning on your own systems or with explicit authorization. Using it against third-party systems without permission is illegal. Underc0de promotes ethical hacking: responsibility for its use lies with whoever runs it.