paskto

Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

nikto

nikto Сканер веб-серверов Nikto — https://cirt.net/Nikto2 Полная документация — https://github.com/sullo/nikto/wiki Обычный запуск: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.com Run using...

OSTE-Meta-Scan

OSTE-Meta-Scanner This project is now maintained and supported by OSTE and is no longer available as an open-source project. For inquiries, commercial use, or support, please contact OSTE via LinkedIn, or official website, or sales team at +213.7.98.38.94.54 via whatsup. This project aims to...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

kaboom

About Kaboom is an automatism for penetration tests. It performs several tasks for the first two phases of the test: information gathering and vulnerability assessment. All informations collected are saved into a directory hierarchy very simple to browse also in case of multiple targets. Details...

paskto

Paskto - 수동 웹 스캐너 Paskto는 Common Crawl 인터넷 인덱스를 사용하여 웹을 수동으로 스캔합니다. 인덱스를 요청 시 다운로드하거나 로컬 시스템에서 데이터를 파싱하는 방식으로 작동합니다. URL은 Nikto 및 알려진 URL 목록을 통해 처리되어 흥미로운 콘텐츠를 식별합니다. 해시 시그니처는 일부 IoT 장치나 웹 애플리케이션의 알려진 기본 콘텐츠를 식별하는 데에도 사용됩니다. Options -d, --dir-input directory Directory with common crawl index file...

reverie

reverie Parrot Linux를 위해 설계된 자동화된 침투 테스트 도구 이 도구는 정보 수집, 보안 감사, 보고서 작성과 같은 기본적인 침투 테스트 작업을 완전 자동으로 수행합니다. 사용법 다운로드 / 클론 git clone https://github.com/baguswiratmaadi/reverie reverie 디렉토리로 이동 cd reverie reverie에 권한 부여 chmod 777 .sh 설치 없이 reverie 실행 ./reverie.sh reverie를 설치하려면 ./install.sh 변경 사항 1.0...

AlienTec-Recon-Tool

AlienTec 👽 Recon-Tool ❤️ 여러분의 지원이 큰 차이를 만듭니다 AlienTec Recon-Tool을 사용해 주셔서 감사합니다! 이는 열정적인 프로젝트이며, 항상 무료 오픈소스 버전으로 제공될 것입니다. 여러분의 지원은 계획된 Pro 버전 개발을 가속화하고 이 무료 도구를 유지하는 데 도움이 됩니다. 이 프로젝트에 가치를 느끼신다면 후원자가 되어 주시기 바랍니다! | GitHub Sponsors를 통해 | | :--- | :--- | | ➡️ Sponsor on GitHub | Do you like AlienTec...

easy_security

easysecurity sublist3r, massan, CVE-2018-15473, SSH 브루트포스, FTP 브루트포스 및 nikto를 포함한 프로젝트...

Nikto Web Scanner 2.6.1

Nikto is an Open Source web server scanner which performs comprehensive tests against web servers for multiple items, including over 3500 potentially dangerous files/CGIs, versions on over 900 servers, and version specific problems on over 250 servers...

web-exploitation-lab

🌐 Web Exploitation Lab Payloads, techniques et cheatsheet w...

ExploitIQ

⚡ ExploitIQ Autonomous AI-Powered Penetration Testing Assis...

cyart-vapt-week-2

cyart-vapt-team This repository contains the Week 2 VAPT lab w...

EUVD-2005-2861

Malware in sbrugna...

redteam-notebook

It is an offensive tool for network and web exploitation. The repository, redteam-notebook, contains a collection of commands, tips, and tricks for preparation and execution of red teaming activities, specifically for the OSCP exam. The primary vulnerability targeted is not explicitly stated, but...

Linux Distros Unpatched Vulnerability : CVE-2018-11652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header,...

Sr2T - Converts Scanning Reports To A Tabular Format

Scanning reports to tabular sr2t This tool takes a scanning tool's output file, and converts it to a tabular format CSV, XLSX, or text table. This tool can process output from the following tools: 1. Nmap XML; 2. Nessus XML; 3. Nikto XML; 4. Dirble XML; 5. Testssl JSON; 6. Fortify FPR. Rationale...

SUSE CVE-2018-11652

CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV report...

GHSA-X89R-2WJQ-MJ7X Apache Tomcat Discloses MS-DOS Pathname

Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto...