🛡️ PenToolKit - Penetration Testing Payload Generator

A professional full-stack web application for generating, customizing, and managing cybersecurity payloads for authorized penetration testing.

🎯 Features

✨ Payload Generator - Generate customized exploits in seconds

🎨 Professional UI - Dark mode cybersecurity theme with cyan accents

📋 10+ Vulnerability Types:

• CSRF (Cross-Site Request Forgery)
• XSS (Cross-Site Scripting)
• SQLi (SQL Injection)
• LFI (Local File Inclusion)
• XXE (XML External Entity)
• SSRF (Server-Side Request Forgery)
• SSTI (Server-Side Template Injection)
• IDOR (Insecure Direct Object References)
• Command Injection
• Path Traversal
• Race Condition

📥 Copy & Download - Export payloads in multiple formats

🔍 Filter & Search - Find payloads by type and difficulty

💾 Template Library - Pre-built attack templates

---

🔧 Tech Stack

Backend

• Django 4.2 - Web framework
• Django REST Framework 3.14 - REST API
• Python 3.8+
• SQLite/PostgreSQL - Database

Frontend

• React 18 (Vite)
• Tailwind CSS - Styling
• Axios - HTTP client
• Lucide React - Icons

---

🚀 Quick Start

Backend Setup (Terminal 1)

cd backend
python -m venv venv

# Windows
.\venv\Scripts\Activate.ps1

# macOS/Linux
source venv/bin/activate

pip install -r requirements.txt
python manage.py migrate
python manage.py createsuperuser
python manage.py runserver

Backend: http://localhost:8000

Frontend Setup (Terminal 2)

cd frontend
npm install
npm run dev

Frontend: http://localhost:5173

---

📊 Project Structure

pentoolkit/
│
├── .gitignore
├── README.md
├── LICENSE
│
├── backend/
│   ├── venv/                    # Virtual environment
│   ├── config/
│   │   ├── settings.py          # Django settings
│   │   ├── urls.py              # URL routing
│   │   ├── asgi.py
│   │   └── wsgi.py
│   ├── payloads/                # Main app
│   │   ├── models.py            # Database models
│   │   ├── views.py             # API endpoints
│   │   ├── serializers.py       # DRF serializers
│   │   ├── urls.py              # App routes
│   │   ├── admin.py             # Admin config
│   │   ├── migrations/
│   │   └── apps.py
│   ├── manage.py
│   ├── db.sqlite3               # SQLite database
│   └── requirements.txt
│
└── frontend/
    ├── src/
    │   ├── components/
    │   │   ├── PayloadGenerator.jsx   # Main generator
    │   │   └── MyPayloads.jsx         # User payloads
    │   ├── App.jsx
    │   ├── index.css
    │   └── main.jsx
    ├── public/
    ├── node_modules/
    ├── package.json
    ├── vite.config.js
    ├── tailwind.config.js
    ├── postcss.config.js
    └── index.html

---

📋 Available Payloads

#	Name	Type	Difficulty
1	Basic CSRF Hidden Form	CSRF	Easy
2	XSS Script Injection	XSS	Medium
3	SQL Injection - Auth Bypass	SQLi	Hard
4	Local File Inclusion	LFI	Medium
5	CSRF - Modern Fetch API	CSRF	Medium
6	XXE - XML External Entity	XXE	Hard
7	XSS - Session Cookie Stealer	XSS	Hard
8	OS Command Injection	Command Injection	Hard
9	Path Traversal	Path Traversal	Medium
10	Race Condition	Race Condition	Hard

---

⚠️ Legal Notice

Use ONLY for authorized penetration testing!

• Only test systems you own or have explicit permission to test
• Unauthorized testing is illegal
• This tool is for educational purposes only
• The authors are NOT responsible for misuse

---

📄 License

MIT License - See LICENSE file for details

---

👨‍💻 Author

Vishnu - Security Researcher & Developer

GitHub: https://github.com/vishchievous01/pentoolkit

---

Happy Penetration Testing! 🚀