**:..
.==..::--===++===-=*=.
+: -+-.:::---====---=+
.+: -+. .-=:
:+: .=+. -:=:
-=: ::+: :: --
=-: -.+: .: :=
+-:...::::----::--.+:. .- .+
.*%+::. :: +: ....:::::-: +:
=*=.::--==+++****++=%#-::.. ::. =-
-*-. .+.:=---*= ..::--==++++++#%=
++-:..... :=. .::=++-: .. :: -+*.
*+: --...-:::+++--:...:: .: -= *:
.*+: =: .-..:=:+-:==:-... .- -= +-
:**=======----:::.==.+= -=--:. --- -=
-+=. :=---:: ..==.==:=------=--+=. :*
+=-. :+- .::..-- ==+:.- : :-: .*:
+--. .=- :--- == :: : :.:- +-
.#@#===--::::::==.::--===-. ::. .- ==
-*+: ...::---===+++*@@*****+++==--=::...=*=
*+: :-+--*: .. =...::*@*
+=: :.--*: .. =: -*:
:++: :.-+- .: --.+-
-**:----====+++++++##====----::::...===.
:- ::=: .:..:++-
:-. :=. : --
-=::::::--------=-:::::::......--.
.. .::
nock
Who's there?
A way in.
┤ brief ├
- 01
Knock
recon · fingerprint · attack surface
Sends the first requests. Reads the response headers and fingerprints the stack. Lists the services that answer.
- 02
Map
hosts · routes · params · roles
Crawls the app and records its routes, parameters and roles. Shows what exists, which roles can reach it, and where input goes.
- 03
Pick
hypothesis · next request · autonomous
Picks the likeliest weakness, sends the next request, reads the response, and adjusts. It runs on its own, inside the scope you set.
- 04
In
poc · finding · export
When a test works, you get a finding and a proof-of-concept request that reproduces it. Export the findings as a report.