15 matches found
LinkFinder
Acerca de LinkFinder LinkFinder es un script en Python diseñado para descubrir endpoints y sus parámetros en archivos JavaScript. De esta manera, los testers de penetración y cazadores de bugs pueden recopilar nuevos endpoints ocultos en los sitios web que están probando, obteniendo así nuevos...
endext
EndExt EndExt es una herramienta en .go para extraer todos los endpoints posibles de los archivos JS Idea Cuando rastreas todos los archivos JS desde waybackurls por ejemplo, o incluso recolectas las URLs de los archivos JS de la página de origen de tu sitio objetivo… Si el sitio web usa un siste...
box-js
box.js Una utilidad para analizar JavaScript malicioso. Instalación Simplemente instala box-js desde npm: root@kitploit: npm install box-js --global box-js también está disponible: como módulo de Cuckoo consulta el directorio integrations y Nwinternights/CuckooBoxjs; como Dockerfile consulta...
jspanda
JSPanda JSpanda is client-side prototype pollution vulnerability scanner. It has two key features, scanning vulnerability the supplied URLs and analyzing the JavaScript libraries' source code. However, JSpanda cannot detect advanced prototype pollution vulnerabilities. How JSPanda works? Uses...
pylibemu
Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu is a...
jsfinder
Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...
JSpector
JSpector JSpector es una extensión de Burp Suite que rastrea pasivamente archivos JavaScript y crea automáticamente problemas con URLs, endpoints y métodos peligrosos encontrados en los archivos JS. Requisitos previos Antes de instalar JSpector, necesitas tener Jython instalado en Burp Suite...
JShunter
JSHunter Professional JavaScript Security Analysis Tool Complete endpoint discovery, sensitive data detection, and advanced code analysis for security professionals About JSHunter is a comprehensive command-line tool for JavaScript security analysis and endpoint discovery. Built for security...
jsluice
jsluice jsluice is a Go package and command-line tool for extracting URLs, paths, secrets, and other interesting data from JavaScript source code. If you want to do those things right away: look at the command-line tool. If you want to integrate jsluice's capabilities with your own project: look ...
XSSREFLECTOR
XSS Reflector XSS Reflector adalah tools otomatis untuk...
Fake Software Update Abuses NetSupport Remote Access Tool
Over the last few months, FireEye has tracked an in-the-wild campaign that leverages compromised sites to spread fake updates. In some cases, the payload was the NetSupport Manager remote access tool RAT. NetSupport Manager is a commercially available RAT that can be used legitimately by system...
Dissecting the Chrome Extension Facebook malware
It's been a few days since Kaspersky Lab's blog post about the Multi Platform Facebook malware that was spread through Facebook Messenger. At the same time as Kaspersky Lab were analyzing this threat, a few researchers where doing the same, including Frans Rosén, Security Advisor at Detectify...
New Version of REMnux Malware-Analysis Linux Distribution Released
A new version of the REMnux specialized Linux distribution has been released, and it now includes a group of new tools for reverse-engineering malware. The new additions include a tool for memory forensics as well as one for analyzing potentially malicious PDFs. REMnux was first released last yea...
Web Crawler : Web Application Crawler - New Release
Web Crawler is a open source application that is based on the WebEngine library. WebEngine is the set of tools for performing black-box web-sites testing and other similar tasks. It provides tools means for reception of documents from a web-server, parse HTML pages, their comparisons, search...