Striker

Striker C2 Striker is a simple Command and Control C2 program. Disclaimer This project is under active development. Most of the features are experimental, with more to come. Expect breaking changes. Features A Agents Native agents for linux and windows hosts. Self-contained, minimal python agent...

redjoust

ᵔᴥᵔ RedJoust A quick and easy to use security reconnaissance webapp tool, does OSINT, analysis and red-teaming in both passive and active mode. Written in nodeJS and Electron. Join the community Join the community of Kawaiipantsu / THUGSred and participate in the dev talk around Redjoust or simpl...

Nodejs-Tracer

nodejs-tracer Simple Node.jstracer that logs calls to core modules, can spoof certain calls to defeat anti-analysis, save files written by the application and more. Useful to analyze heavily obfuscated Node.js malware. Usage node -r .\tracer.js main.js Example trace with DISPLAYSTACK active:...

NodeSecurityShield

Node Security Shield Node Security Shield NSS is an Open source Runtime Application Self-Protection RASP tool which aims at bridging the gap for comprehensive NodeJS security by enabling Developer and Security Engineer to declare what resources an application can access. Inspired by the Log4Shell...

Recheck

Recheck Recheck Deep scan domain and find all possible domain to takeover Quick Links Demo Installation Feature Example Run / Installation How to run ? git clone https://github.com/tegal1337/Recheck cd Recheck npm install npm start Feature Feature| Status ---|--- Deepscan domain| Ok Find Possible...

dvna

Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities. The fixes branch will contain fixes for the vulnerabilities. Fixes for vulnerabilities...

burp-exporter

Exporter Extension for Burp Suite Community and Pro Follow us to know more about tips and others extensions Description Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions. It also adds a tab called Exporter where you can...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

Important: Red Hat Security Advisory: nodejs:22 security update

An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

witcher

witcher Implement and monitor Appsec control at scale. Requirements NodeJS 20.13 Tested on Mac Ubuntu How to install $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i Build a Docker image $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ docker build ...

reconness

ReconNess Web App Why ReconNess? Well, we have seen a lot of bugbounty hackers organizing his recon using txt and doing a lot of bash scripts to filter the output to keep everything organized with the intention to focus only on the potentially vulnerable targets. But realistically this demands a...

patchright

🎭 Patchright Patchright는 Playwright 테스트 및 자동화 프레임워크의 패치된, 탐지되지 않는undetected 버전입니다. Playwright의 드롭인 대체품으로 사용할 수 있습니다. !NOTE 이 저장소는 Patchright 드라이버를 제공합니다. Patchright를 사용하려면 Python 패키지, NodeJS 패키지 또는 커뮤니티 기반 .Net 패키지를 확인하세요. !IMPORTANT Patchri...

ghostrecon

클라우드 기반의 빠르고 사용자 정의가 가능한 웹 Recon 도구. 사전 요구사항 NodeJs Python3 Go pip3 npm 스크린샷 📸 : 스크린샷 1 스크린샷 2 Linux & Mac용 설치 단계 🐧 👨🏽‍💻: !ubuntuhttps://assets.kitploit.com/production/public/readmes/44315/e0602ae...

SucoshScanny

Sucosh Scanny "Sucosh" is an automated Source Code vulnerability scannerSAST and assessment framework for PythonFlask-Django & NodeJs capable of performing code review in Web Application Developing or Source Code Analysis processes.It’s can detect a lot of vulnerabilityRCE,SSTI,Insecure...

htcap

HTCAP htcap is a web application scanner able to crawl single page application SPA recursively by intercepting ajax calls and DOM changes. KEY FEATURES Recursive DOM crawling engine Discovers ajax/fetch/jsonp/websocket requests Supports cookies, proxy, custom headers, http auth and more Heuristic...

nodejshell

NODEJSHELL - NodeJs 역직렬화deserialization를 위한 리버스 셸 익스플로잇 CVE-2017-5941 이 익스플로잇은 십진수decimal로 인코딩된 후 base64로 인코딩되는 리버스 셸 페이로드를 자동으로 생성합니다. 그 후 이 페이로드는 사용자 입력을 직렬화serialize하고 쿠키에 저장하는 http POST 요청을 통해 전송됩니다. 그런 다음 GET 요청을 통해 접근하여 RCE를 획득합니다. 사용 방법: python3 nodejshell.py lhost : 로컬 IP 주소 lport : 리버스 셸...

Reverse_HTTPS_Bot

ReverseHTTPSBot 0.8 설명: 침투 테스트를 위한 파이썬 기반 HTTPS 원격 액세스 트로이목마입니다. 서버는 현재 NodeJS 기반입니다. 봇 요구 사항: pip install requests pip install pyscreenshot 서버 요구 사항: sh setup.sh 테스트용 자체 서명 인증서 및 키 생성을 위해 sudo npm install restify, express, lodash, save, sockjs, body-parser index.html의 새 SockJS 객체에서 서버 IP를 변경하는 것...

ninjasworkout

취약한 NodeJS 애플리케이션 빠른 시작 Download the Repo = run npm i 모든 의존성을 설치한 후 다음을 실행하세요 node app.js or nodemon app.js 추가된 취약점 프로토타입 오염 ✅1 NoSQL 인젝션 ✅2 크로스 사이트 스크립팅 ✅3 취약한 접근 제어 ✅4 취약한 세션 관리 ✅5 취약한 정규 표현식 구현 ✅ 6 경쟁 조건 ✅7 CSRF - 교차 사이트 요청 위조 ✅8 취약한 무차별 대입 공격 방어 ✅9 사용자 열거 ✅10 Referrer에서 리셋 비밀번호 토큰 유출 ✅11 비밀번호...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4 Broken Session Management ✅5 We...