purpleteam-s2-containers

Contenitori Stage Two di purpleteam Contenitori Stage Two di purpleteam Questi contenitori vengono avviati dinamicamente in base all'input di configurazione Build User Job fornito alla CLI di purpleteam, in particolare al numero di testSession che definisci. Le seguenti configurazioni sono...

adapt

Riepilogo ADAPT è uno strumento che esegue test di penetrazione dinamici automatizzati per applicazioni web. È progettato per aumentare l'accuratezza, la velocità e la fiducia negli sforzi di penetration testing. ADAPT testa automaticamente molteplici vulnerabilità standard del settore OWASP Top ...

FiddleZAP

FiddleZAP FiddleZAP è una versione semplificata di EKFiddle per OWASP ZAP. Con ZAP come proxy web, puoi segnalare traffico dannoso basato su espressioni regolari predefinite. Esempio: Avviso, evidenziazione e marcatura quando una regex corrisponde a una stringa all'interno del codice sorgente HTM...

archerysec

...

zaproxy

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

seccubus

Informazioni su Seccubus Seccubus automatizza scans di vulnerabilità regolari con vari strumenti e aiuta i professionisti della sicurezza nell'analisi rapida del suo output, sia al primo scan che a scans successivi. Con il delta reporting su scans ripetuti, i risultati devono essere giudicati sol...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

adapt

Summary ADAPT is a tool that performs Automated Dynamic Application Penetration Testing for web applications. It is designed to increase accuracy, speed, and confidence in penetration testing efforts. ADAPT automatically tests for multiple industry standard OWASP Top 10 vulnerabilities, and outpu...

DVWA-ZAP-PENTEST

DVWA-Schwachstellenbewertung mit OWASP ZAP Eine praktische Sicherheitsbewertung einer Webanwendung der DVWA Damn Vulnerable Web App , durchgeführt mit OWASP ZAP Zed Attack Proxy 2.17.0. Dieses Projekt dokumentiert den gesamten Arbeitsablauf: Aufklärung Spidering, automatisiertes...

Open-Worldwide-Application-Security-Project-OWASP-

Progetto-Aperto-Mondiale-di-Sicurezza-Applicativa-OWASP- Valutazione automatizzata delle vulnerabilità web del DVWA utilizzando OWASP ZAP per identificare e analizzare falle di sicurezza critiche come l'esecuzione remota di codice CVE-2012-1823...

HUNT

HUNT Suite Proxy-Erweiterungen Was ist die HUNT Suite? HUNT Suite ist eine Sammlung von Erweiterungen für Burp Suite Pro/Free und OWASP ZAP. Identifiziert häufige Parameter, die anfällig für bestimmte Schwachstellenklassen sind Burp Suite Pro und OWASP ZAP. Organisiert Testmethoden Burp Suite Pro...

zap-hud

ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...

web-threat-mitigation

web-threat-mitigation Laboratorio pratico per rilevare e mitigare le minacce alle applicazioni web utilizzando OWASP ZAP, Burp Suite e ModSecurity WAF con OWASP CRS. Caso di studio: Spring4Shell CVE-2022-22965. Setup locale basato su Docker. Laboratorio di Mitigazione delle Minacce Web – OWASP ZA...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

CVE-2026-57301

Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller...

CVE-2026-57301

Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller...

CVE-2026-57301

Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller...

web-app-security-owasp-zap

🔐 Web Application Security Testing with OWASP ZAP Author:...

EUVD-2022-3026

Malicious code in bioql PyPI...

CVE-2019-1003060

Jenkins Official OWASP ZAP Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...