Storm-Framework is an offensive security tool suite built for reconnaissance, vulnerability assessment, exploitation, and security research. It aims to streamline security testing workflows for cybersecurity professionals, penetration testers, and bug bounty hunters.
If you have ever used metasploit or you are a metasploit user, you will be 100% able to use Storm Framework.
See the explanation about storm framework flow in docs or in FLOW
We explain the essence so that it is easier to understand and not ambiguous, perhaps we do not explain some of the other logic because we are not yet sure about its maturity. But don't worry, we will continue to update it little by little in the future.
We have prepared the documentation through a web-based platform that we previously built to make it easier to explore, read, and gain a deeper understanding of everything that is available. We continuously update and add documentation whenever there are feature changes or new features introduced. You can access it here: Documentation
We recommend the standard installation provided:
To get started with Storm:
sudo storm: This is the main interface for interacting with Storm.
Commands in Storm:
help: Displays help information on what commands can be used.
Module initialization command:
use: To use the module in modules/.
set: To set the value in the variable, a module is required.
run: Running the module.
For questions or suggestions, etc:
- Join in place GitHub discussion for support and others.
- Send GitHub issues for bug reports and feature requests.
- Follow @elzyone for X or @zxelzy for github account.
This open source Storm-Framework project is open to anyone. If you're interested in helping develop this project—whether through bug fixes, feature additions, or documentation—please check out our contribution guidelines.
👉 Read the contribution guidelines here: CONTRIBUTING
Thank you for your interest in contributing! 💙
This tool is distributed under the GPL License.