A multi-purpose security testing toolkit built with Python. Includes brute-force auditing, DDoS simulation, image logging, Discord tools, Dox tools suite, OSINT, stealer builder, and more.
- Python 3.8+
- Windows recommended for full feature support
- pip packages listed in
setup/requirements.txt - Node.js (optional, for Vercel image logger deployment)
- Vercel CLI (
npm i -g vercel) (optional) - Go (optional, for Sherlock and PhoneInfoga)
# 1. Clone or download the repo
git clone https://github.com/kayden765/python-ddos-multitool-script.git
cd python-ddos-multitool-script
# 2. Install Python dependencies
pip install -r setup/requirements.txt
# 3. Run the tool
python mainframe.pyRun setup\setup.bat as Administrator to auto-install all Python dependencies and external tools in one go:
setup\setup.batThis will:
- Install all Python dependencies from
setup/requirements.txt - Install Impacket and download
psexec.py/wmiexec.pytocore/impacket_scripts/ - Install Chocolatey if not present
- Install Hashcat, Metasploit, Nmap via Chocolatey
- Check for Node.js and Vercel CLI (for image logger)
- Check for Go (for Sherlock and PhoneInfoga)
After setup completes, restart your terminal and run python mainframe.py.
- Use number keys to select menu options
- Press ESC to return to the previous menu
- Type
helpfor a list of commands - Type
toolsfor a list of tool categories - Type
creditsto see credits - Type
exitto quit
- High-speed ping latency monitor
- Reverse DNS resolver
- Multi-threaded port scanner
- Subnet ping sweeper
- Service banner grabber
- Passive subdomain discovery via crt.sh
- RDAP domain registration mapper
- HTTP header security auditor
- DNS-over-HTTPS resolver
- IP geolocation lookup
- Sherlock username tracer (300+ platforms)
- PhoneInfoga telecom scanner
- Holehe email platform auditor
- Socialscan identity profiler
- Data breach explorer
- Tor exit node validator
- IDN homograph phishing analyzer
- Name database search
- Reverse image search
- Domain WHOIS lookup
- Email validator & MX lookup
- Live packet monitor (requires admin)
- Secret/private key leak scanner
- Cryptographic hash matrix generator
- System information profiler
- Base64 encode/decode matrix
- python obfuscator
- Python Deobfuscator
- File integrity monitor
- SSL/TLS certificate auditor
- Active network connection profiler
- Password entropy analyzer
- ARP table profiler
- CIDR subnet calculator
- UPnP/SSDP device discovery
- Hosts file DNS auditor
- MAC vendor lookup
- Beast Mode DDoS engine
- Image logger (local or Vercel deployment)
- Brute force auditor
- Metasploit console launcher
- Msfvenom payload generator
- Hashcat password auditor
- Impacket remoting suite (psexec/wmiexec)
- Real-time security log diagnostic
- Nmap advanced port scanner
- Token info & checker
- Webhook spammer/deleter
- Nitro generator + checker
- Server info & cloner
- Mass DM tool
- Dox maker (use directory 2 to gather information on someone beforehand)
- Information gathering and organization
- Configurable payload generation
- System information collection
- Wallet session grabbing
- Game session grabbing
- Telegram session grabbing
- Discord token/injection grabbing
- Roblox cookie grabbing
- Browser password/cookie/history/download/extension grabbing
- Interesting file scanner
- Camera capture
- Screenshot capture
- Cookie information lookup
- User ID information
- Username information
- Group information
- Game information
The Image Logger can be deployed to Vercel for a public URL that works everywhere, including Discord.
- Node.js installed (https://nodejs.org/)
- Vercel CLI installed:
npm install -g vercel - A Vercel account (free tier works)
-
Navigate to the Vercel project folder:
cd core/vercel-image-logger -
Deploy to Vercel:
vercel --prod
Follow the prompts to link your project. Vercel will output a public URL.
-
Configure Discord Webhooks (optional): The Vercel serverless function reads webhook URLs from Cloudflare Worker environment variables.
-
Verify deployment: Open the deployed URL in a browser. Any visit will be logged and posted to your Discord webhook.
This tool is for authorized security testing and educational purposes only.
- Only use on systems you own or have explicit written permission to test
- Unauthorized access to computer systems is illegal
- The authors are not responsible for misuse or damage caused by this tool
- Users assume all liability for their actions
- Respect all applicable laws and regulations in your jurisdiction
If you find this project useful, consider supporting development:
bc1quaqzqt8g6xv7r854wqm5wsn4z3mwu9arnece6q