js-x-ray

!slsa...

LinkFinder

О LinkFinder LinkFinder — это скрипт на Python, предназначенный для обнаружения конечных точек и их параметров в JavaScript-файлах. Благодаря этому тестировщики на проникновение и охотники за багами могут находить новые, скрытые конечные точки на тестируемых сайтах. Это открывает новые области дл...

box-js

box.js Утилита для анализа вредоносного JavaScript. Установка Просто установите box-js из npm: root@kitploit: npm install box-js --global box-js также доступен: как модуль Cuckoo см. каталог integrations и Nwinternights/CuckooBoxjs; как Dockerfile см. integrations/README.md; как пакет в...

JSpector

JSpector JSpector — это расширение для Burp Suite, которое пассивно сканирует JavaScript-файлы и автоматически создаёт проблемы с URL-адресами, конечными точками и опасными методами, найденными в JS-файлах. Предварительные требования Перед установкой JSpector необходимо установить Jython в Burp...

endext

EndExt EndExt — это .go-инструмент для извлечения всех возможных конечных точек из JS-файлов Идея Когда вы собираете все JS-файлы, например, с помощью waybackurls, или даже получаете URL-адреса JS-файлов из исходного кода главной страницы вашего целевого сайта… Если сайт использует API-систему и ...

jspanda

JSPanda JSpanda는 클라이언트 측 프로토타입 오염 취약점 스캐너입니다. 두 가지 주요 기능이 있습니다: 제공된 URL의 취약점 스캔과 JavaScript 라이브러리의 소스 코드 분석입니다. 하지만 JSpanda는 고급 프로토타입 오염 취약점을 탐지할 수 없습니다. JSPanda 작동 방식 프로토타입 오염 취약점을 위해 여러 페이로드를 사용합니다. 스캔을 위해 대상의 모든 링크를 수집하고 JSpanda가 획득한 URL에 페이로드를 추가한 후, 헤드리스 Chromedriver로 각 URL을 탐색합니다. 잠재적으로 취약한...

jsfinder

Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...

pylibemu

Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu is a...

jsluice

jsluice jsluice는 JavaScript 소스 코드에서 URL, 경로, 비밀키secret 및 기타 흥미로운 데이터를 추출하기 위한 Go 패키지이자 명령줄 도구입니다. 바로 사용해보고 싶다면: 명령줄 도구를 살펴보세요. jsluice의 기능을 자신의 프로젝트에 통합하려면: examples를 살펴보고 패키지 문서를 읽어보세요. 설치 명령줄 도구를 설치하려면 다음을 실행하세요: root@kitploit: ▶ go install github.com/BishopFox/jsluice/cmd/jsluice@latest 패키지를...

JShunter

JSHunter Professional JavaScript Security Analysis Tool Complete endpoint discovery, sensitive data detection, and advanced code analysis for security professionals About JSHunter is a comprehensive command-line tool for JavaScript security analysis and endpoint discovery. Built for security...

XSSREFLECTOR

XSS Reflector XSS Reflector adalah tools otomatis untuk...

Fake Software Update Abuses NetSupport Remote Access Tool

Over the last few months, FireEye has tracked an in-the-wild campaign that leverages compromised sites to spread fake updates. In some cases, the payload was the NetSupport Manager remote access tool RAT. NetSupport Manager is a commercially available RAT that can be used legitimately by system...

Dissecting the Chrome Extension Facebook malware

It's been a few days since Kaspersky Lab's blog post about the Multi Platform Facebook malware that was spread through Facebook Messenger. At the same time as Kaspersky Lab were analyzing this threat, a few researchers where doing the same, including Frans Rosén, Security Advisor at Detectify...

New Version of REMnux Malware-Analysis Linux Distribution Released

A new version of the REMnux specialized Linux distribution has been released, and it now includes a group of new tools for reverse-engineering malware. The new additions include a tool for memory forensics as well as one for analyzing potentially malicious PDFs. REMnux was first released last yea...

Web Crawler : Web Application Crawler - New Release

Web Crawler is a open source application that is based on the WebEngine library. WebEngine is the set of tools for performing black-box web-sites testing and other similar tasks. It provides tools means for reception of documents from a web-server, parse HTML pages, their comparisons, search...