HoneyProxy

此项目已迁移。 HoneyProxy 现已归入 mitmproxy：http://docs.mitmproxy.org/en/stable/mitmweb.html HoneyProxy HoneyProxy 是一个轻量级中间人代理，可帮助您分析 HTTPS 流量流。它专为安全研究人员的需求而设计，支持实时和日志分析。该项目与 mitmproxy 兼容，专注于在取证场景中有用的功能，并提供扩展的可视化能力。 HoneyProxy 以 HTML5 浏览器应用程序的形式运行，底层基于 Python 编写的日志核心。该项目由 Maximilian Hils 主导开发，并在 Guillaume...

httpdoom

HttpDoom - HTTP攻击面分析器 以非常快速可靠的方式验证大型基于HTTP的攻击面。灵感来源于 Aquatone。 安装 你需要安装6.0或更高版本的 dotnet SDK： $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source .\nupkg\ httpdoom.console 卸载： $ dotnet tool uninstall -g httpdoom.console 工作原理？ CLI的描述（--help）就是你需要知道的一切： HttpDoom.Console...

Zeek 环境问题漏洞

Zeek is a powerful network analysis framework. An environment issue vulnerability exists in zeek version 4.1.0 that will invalidate any security analysis based on ZEEK HTTP...

CVE-2018-2442

In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details captured by an HTTP analysis tool could be reused in a HTML page while the user session is still valid...

Oracle Application Testing Suite Detection

Detects the installed version of Oracle Application Testing Suite. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

For a certain APP vulnerability discovery(capture+reverse=dig to the maximum vulnerability)-vulnerability warning-the black bar safety net

! Author: think twice journey Royalties：300RMB（not taking you to the contributor!） Submission methods: send an email to linwei3 6 0. cn, or visit the web version of the online submission Written on the front I learn penetration testing, mainly Web direction in a few months, and now was just getti...

[Wireshark v1.10.0 RC1] The world’s foremost network protocol analyzer

Wireshark is the world’s foremost network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network. It is the de facto and often de jure standard across many industries and educational institutions. Wireshark development thrives thanks to the...