traxss

Traxss Automated Vulnerability Scanner for XSS | Written in Python3 | Utilizes Selenium Headless Forks DEMO Background Traxss is a Hacktoberfest Project! If you are looking for a place to make contribute, please feel free. Traxss is an automated framework to scan URLs and webpages for XSS...

CVE-2020-5902

CVE-2020-5902 BIG-IP CVE-2020-5902 Exploit POC and automation scanning vulnerability simple program for exploit big-ip and automation scanning vulnerability install gem install httparty gem install colorize gem install timeout ruby big-ip.rb list.txt output.txt...

Log4JHunt

Log4JHunt An automated, reliable scanner for the Log4Shell CVE-2021-44228 vulnerability. Video demo: Usage Here the help usage: $ python3 log4jhunt.py +--------------+ Log4JHunt +--------------+ + Log4jHunt by RedHunt Labs - A Modern Attack Surface ASM Management Company + Author: Pinaki Mondal R...

Grafxploit

Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...

GrafXploit

Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...

BWASP

BWASP The BoB Web Application Security Project BWASP is an open-source, analysis tool to support for Web Vulnerability Manual Analysis hackers. The BWASP tool basically provides predicted information through vulnerability analysis without proceeding with an attack. BWASP supports performing...

inter-recon

inter-recon Script to perform automatic initial web and vulnerability recon. It has some checks in case of errors. There is a possibility to skip some checks, to restart them and/or to continue with the last point you stopped. This is because sometimes there are network issues like time limit on...

burp-automation

BurpOMation Performing automated scan using Burp Suite Pro & Vmware Burp Rest API with Robot Framework using Python3. Blog Visit blog for detailed explanation of each step. Explanation & Installation Blog What it does One click run using bash installs all the dependencies with verbose...

Fast-Google-Dorks-Scan

Fast Google Dorks Scan The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated. Usage example: chmod +x...

Taipan

Taipan is now a sponsored project. The Community sponsor will receive access to the laset version of Taipan Community Edition. The free version is release after three months from the release date. To know more visit: https://github.com/enkomio-sponsor/info or https://taipansec.com. Latest Communi...

Subrake

Subrake 🦅 A DNS automated scanner and tool Zone Transfer, DNS Zone Takeover, Subdomain Takeover. Background 📈 Subrake, initially started as a personal project of mine for subdomain enumeration is a now a detailed DNS scanning tool that can help you identify Zone Transfers , DNS Zone Takeover and...

dorkscout

dorkscout dokrscout is a tool to automate the finding of vulnerable applications or secret files around the internet throught google searches, dorkscout first starts by fetching the dorks lists from https://www.exploit-db.com/google-hacking-database and then it scans a given target or everything ...

ator

Authentication Token Obtain and Replace Extender Introduction In the world of web security testing, automation is key, and Burp Suite is the go to choice. However, to truly harness the power of Burp for automated scanning, you need the right plugins. That's where ATOR comes in. This open-source...

extended-ssrf-search

Extended ssrf search This tool search for SSRF using predefined settings in different parts of a request path, host, headers, post and get parameters. First step Rename example.app-settings.conf to app-settings.conf and adjust settings. The most important setting is the callback url. I recommend ...

log4j

log4j An automated header extensive scanner for detecting log4j RCE CVE-2021-44228 Usage $ python3 log4j.py -l urls.txt --dns-log REPLACETHIS.dnslog.cn...

webdiscover

/ / /\ \ | | / \ / / / \ ' \ / /\ / / |/ / \ \ / / \ '| \ /\ / / | | / ///| \ \ | \ V / / | / / |./ /,' ||/\/ / || The purpose of this script is to automate the web enumeration process and search for exploits and vulns for your target attack surface. Added Tools dependencies are installed...

uddup

UDdup - Outil de déduplication d'URLs L'outil prend une liste d'URLs et supprime les pages « dupliquées » au sens des motifs d'URL qui sont probablement répétitifs et pointent vers le même modèle de page web. Par exemple : https://www.example.com/product/123 https://www.example.com/product/456...

catnip

Cat-Nip Автоматизированный базовый инструмент для пентеста Этот инструмент автоматизирует базовые задачи пентеста, такие как сбор информации, аудит и составление отчетов. Таким образом, инструмент выполняет каждую задачу полностью автоматически. Руководство по использованию Скачать / Клонировать...

ator

Extension d'obtention et de remplacement de jetons d'authentification Introduction Dans le monde des tests de sécurité web, l'automatisation est essentielle, et Burp Suite est le choix de prédilection. Cependant, pour vraiment exploiter la puissance de Burp pour les scans automatisés, vous avez...

AWS-Key-Hunter

AWS-Key-Hunter AWS Key Hunter is a powerful and automated tool that scans GitHub repositories for exposed AWS keys. It continuously monitors commits, detects AWS secrets in both base64 and plaintext formats, and alerts users about potential security risks on Discord. Features 🚀 Real-time...