Testing Modules
Testing modules by interface type — Ethernet, USB, Video, Wireless, Serial
Ethernet Modules
| Module | Tools | What It Tests |
|---|---|---|
| Photo | gowitness | Physical port documentation (required) |
| Ethtool | ethtool | Interface statistics, speed, duplex, driver info |
| ConfigDiscovery | tcpdump | Passive network configuration discovery |
| TrafficCollector | tcpdump, tshark | Packet capture for protocol analysis |
| NmapLive | nmap -sn | Live host detection |
| NmapPort | nmap -sV | Port scanning with service/version detection |
| BannerGrab | socket, curl | Service banner collection |
| Web | curl, gowitness, wget, openssl | Web screenshots, spidering, certificate inspection |
| SSL | sslscan, testssl.sh, shcheck | TLS ciphers, certificate analysis, security headers |
| SSH | nmap, ssh-audit | SSH algorithm enumeration, key exchange audit |
| SMB | nmap, smbmap, responder | SMB share enumeration, credential poisoning |
| NFS | nmap | NFS mount enumeration and access testing |
| FTP | nmap | FTP service enumeration and anonymous access |
| Nessus | Nessus | Enterprise vulnerability scanning |
| Nuclei | nuclei | Template-based CVE scanning |
| Responder | responder | LLMNR/NBT-NS/mDNS poisoning |
USB Modules
| Module | Tools | What It Tests |
|---|---|---|
| Photo | gowitness | Physical port documentation |
| UsbPower | usbmon | USB power delivery analysis |
| Keyboard | hid-tools | HID keyboard device enumeration |
| KeyCombos | hid-tools | Key combination injection testing |
| Mouse | hid-tools | HID mouse device enumeration |
| BashBunny | bash-bunny | USB attack payload execution |
Video Modules (HDMI, DVI, DisplayPort, SDI)
| Module | Tools | What It Tests |
|---|---|---|
| Photo | gowitness | Physical port documentation |
| PortType | v4l2-ctl, udevadm | Port type identification (input/output) |
| Input/Output | ffmpeg, v4l2 | Video signal capture and analysis |
| EDID | get-edid, read-edid, edid-decode | Display capabilities, serial numbers, manufacturer data |
| HdmiDDC | ddcutil, ddccontrol | DDC/CI control channel — unauthorized display control |
| HdmiHDCP | hdcp-check, v4l2-ctl | HDCP content protection verification |
| HdmiCEC | cec-client | CEC bus injection — power control, input switching, OSD |
Wireless & RF Modules
| Interface | Key Tools | What It Tests |
|---|---|---|
| WiFi | airmon-ng, airodump-ng, aircrack-ng, reaver, bully, wifite, bettercap, mdk4, hcxdumptool | 802.11 WiFi security |
| Bluetooth | bluetoothctl, btmgmt, btmon, gatttool, sdptool, l2ping, bettercap, crackle, ubertooth-btle | Bluetooth/BLE security |
| Zigbee | whsniff, zbdump, zbstumbler, scapy | Zigbee sniffing and flood testing |
| SubGHz | rfcat, rtl_433, hackrf_transfer, hackrf_sweep, urh_cli | Sub-GHz RF analysis |
| UWB | uwb-sniffer | Ultra-Wideband security |
| RFID | proxmark3, chameleon_cli | RFID sniff and replay |
| ZWave | ezwave, rtl_433 | Z-Wave protocol analysis |
| LoRa | rtl_433, urh_cli | LoRa RF analysis |
| SmartCard | pcsc_scan, opensc-tool, gp | Smart card security |
Serial & Passive Modules
| Interface | Modules | Tools |
|---|---|---|
| DB9 | SerialDetect, CanAssess | sigrok, minicom, can_detect, candump, canplayer |
| Ethernet_tap | Tcpdump_running, Tcpdump_boot, Tcpdump_shutdown | tcpdump (passive capture during device running, boot, and shutdown states) |