OSTE-Meta-Scan

OSTE-Meta-Scanner 이 프로젝트는 현재 OSTE에서 유지 및 지원하며 더 이상 오픈 소스 프로젝트로 제공되지 않습니다. 문의, 상업적 사용 또는 지원은 LinkedIn, 공식 웹사이트 또는 WhatsApp +213.7.98.38.94.54를 통해 OSTE 영업팀에 연락해 주십시오. 이 프로젝트는 동적 애플리케이션 보안 테스트DAST 분야를 단순화하는 것을 목표로 합니다. OSTE 메타 스캐너는 Nikto Scanner, ZAP, Nuclei, SkipFish, Wapiti 등 여러 DAST 스캐너를 결합한 종합적인...

reverie

reverie Parrot Linux를 위해 설계된 자동화된 침투 테스트 도구 이 도구는 정보 수집, 보안 감사, 보고서 작성과 같은 기본적인 침투 테스트 작업을 완전 자동으로 수행합니다. 사용법 다운로드 / 클론 git clone https://github.com/baguswiratmaadi/reverie reverie 디렉토리로 이동 cd reverie reverie에 권한 부여 chmod 777 .sh 설치 없이 reverie 실행 ./reverie.sh reverie를 설치하려면 ./install.sh 변경 사항 1.0...

paskto

Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

kaboom

소개 Kaboom은 침투 테스트를 위한 자동화 도구입니다. 테스트의 첫 두 단계인 정보 수집 및 취약점 평가를 위한 여러 작업을 수행합니다. 수집된 모든 정보는 여러 대상의 경우에도 탐색하기 매우 간단한 디렉터리 계층 구조에 저장됩니다. 세부 사항 Kaboom은 다음 작업을 수행합니다: 1. 정보 수집 포트 스캔 Nmap 웹 리소스 열거 Dirb 2. 취약점 평가 웹 취약점 평가 Nikto - Dirb 취약점 평가 Nmap - Metasploit 자동 취약점 검색 Searchsploit - Metasploit 사전 공격...

AlienTec-Recon-Tool

AlienTec 👽 Recon-Tool ❤️ あなたのサポートが違いを生みます AlienTec Recon-Tool をご利用いただきありがとうございます！これは情熱を注いだプロジェクトであり、常に無料のオープンソースバージョンとして提供されます。 あなたのサポートは、計画されている Pro バージョン の開発を加速し、この無料ツールの維持に役立ちます。このプロジェクトに価値を見出されたなら、サポーターになることをご検討ください！ | GitHub Sponsors 経由 | | :--- | :--- | | ➡️ GitHub でスポンサーになる | AlienTec Recon...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

easy_security

easysecurity sublist3r、massan、CVE-2018-15473、ssh bruteforce、ftp bruteforce、nikto を含むプロジェクト。...

Nikto Web Scanner 2.6.1

Nikto is an Open Source web server scanner which performs comprehensive tests against web servers for multiple items, including over 3500 potentially dangerous files/CGIs, versions on over 900 servers, and version specific problems on over 250 servers...

web-exploitation-lab

🌐 Web Exploitation Lab Payloads, techniques et cheatsheet w...

ExploitIQ

⚡ ExploitIQ Autonomous AI-Powered Penetration Testing Assis...

cyart-vapt-week-2

cyart-vapt-team This repository contains the Week 2 VAPT lab w...

EUVD-2005-2861

Malware in sbrugna...

redteam-notebook

It is an offensive tool for network and web exploitation. The repository, redteam-notebook, contains a collection of commands, tips, and tricks for preparation and execution of red teaming activities, specifically for the OSCP exam. The primary vulnerability targeted is not explicitly stated, but...

Linux Distros Unpatched Vulnerability : CVE-2018-11652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header,...

Sr2T - Converts Scanning Reports To A Tabular Format

Scanning reports to tabular sr2t This tool takes a scanning tool's output file, and converts it to a tabular format CSV, XLSX, or text table. This tool can process output from the following tools: 1. Nmap XML; 2. Nessus XML; 3. Nikto XML; 4. Dirble XML; 5. Testssl JSON; 6. Fortify FPR. Rationale...

SUSE CVE-2018-11652

CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV report...

GHSA-X89R-2WJQ-MJ7X Apache Tomcat Discloses MS-DOS Pathname

Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto...

Apache Tomcat Discloses MS-DOS Pathname

Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto...

Mageia: Security Advisory (MGASA-2018-0310)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...