raider

快速链接 网站. OWASP 页面. 文档. 安装. 常见问题. 入门指南. 架构. 讨论. 问题. 推特. Fediverse. 什么是 Raider OWASP Raider 的开发目标是改进 Web 身份验证测试。如今它已经发展壮大，可用于各种有状态的 HTTP 过程。它将客户端-服务器的信息交换抽象为一个有限状态机。每一步包含一个请求（带有输入）、一个响应（带有输出）、对响应执行的任意操作，以及指向其他阶段的条件链接。由此形成了一种图状结构。Raider 允许你模拟复杂系统，同时让你能够控制进出系统的每一条数据。 图状架构 Raider 定义了一种 DSL 来描述 HTTP...

CVE-2026-20169

IoT-FND 概述 功能 网络发现 扫描器检查指定的IP范围，寻找暴露预期管理服务的设备。 示例检查： IP范围枚举 TCP端口可用性测试 服务发现 基本连接验证 Windows原生实现 使用原生Windows API构建： WinINet WinHTTP Winsock Windows网络库 无需外部框架。 工作原理 研究流程： root@kitploit: Target IP Range | v Port Discovery | v Management Service Detection | v Authentication Testing | v Security...

offensive-security-labs

Offensive Security Labs A collection of hands-on offensive cy...

web-app-pentest-playbook

Web Application Pentest Playbook A structured methodology and...

Dahua Security Assessment Tool - Authentication, Scan, and Exposure Testing Script

This Python script is a security assessment tool designed to evaluate the exposure and potential vulnerabilities of Dahua-based devices commonly IP cameras and NVR systems. It combines multiple testing modules into one CLI utility...

pentest-autopilot-mcps

Pentest Autopilot MCP Servers Professional-grade Model Contex...

EUVD-2017-16573

Malware in sbrugna...

Camtruder - Advanced RTSP Camera Discovery and Vulnerability Assessment Tool

Camtruder is a high-performance RTSP camera discovery and vulnerability assessment tool written in Go. It efficiently scans and identifies vulnerable RTSP cameras across networks using various authentication methods and path combinations, with support for both targeted and internet-wide scanning...

SUSE CVE-2018-1116

A flaw was found in polkit before version 0.116. The implementation of the polkitbackendinteractiveauthoritycheckauthorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and informati...

Raider - Web Authentication Testing Framework

This is a framework designed to test authentication for web applications. While web proxies like ZAProxy and Burpsuite allow authenticated tests, they don't provide features to test the authentication process itself, i.e. manipulating the relevant input fields to identify broken authentication...

DEBIAN-CVE-2018-1116

A flaw was found in polkit before version 0.116. The implementation of the polkitbackendinteractiveauthoritycheckauthorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and informati...