reverie

reverie Parrot Linux向けに設計された自動化ペンテストツール このツールは、情報収集、セキュリティ監査、レポート作成などの基本的なペンテストタスクを完全自動で実行します。 使用ガイド ダウンロード / クローン git clone https://github.com/baguswiratmaadi/reverie reverieディレクトリに移動 cd reverie reverieに実行権限を付与 chmod 777 .sh インストールせずにreverieを実行 ./reverie.sh reverieをインストールする場合 ./install.sh 変更履歴 1...

ssh-audit

ssh-audit...

sslyze

SSLyze SSLyzeは、高速で強力なSSL/TLSスキャンツールおよびPythonライブラリです。 SSLyzeは、サーバーに接続してSSL/TLS構成を分析し、強力な暗号化設定（証明書、暗号スイート、楕円曲線など）が使用されていること、および既知のTLS攻撃（Heartbleed、ROBOT、OpenSSL CCSインジェクションなど）に対して脆弱でないことを確認できます。 主な機能 速度と信頼性に焦点：SSLyzeは実戦でテストされたツールであり、毎日数十万 のサーバーを確実にスキャンするために使用されています。...

sslyze

SSLyze SSLyze is a fast and powerful SSL/TLS scanning tool and Python library. SSLyze can analyze the SSL/TLS configuration of a server by connecting to it, in order to ensure that it uses strong encryption settings certificate, cipher suites, elliptic curves, etc., and that it is not vulnerable ...

sslyze

注意 目前 SSLyze 的开发已转移至单独的代码仓库： https://github.com/nabla-c0d3/sslyze. 本仓库会定期从新父仓库同步更新，但如需最新版本，请查看新仓库。如果你已克隆本仓库但希望追踪新分支，可以使用以下命令更新远程源： root@kitploit: git remote set-url origin https://github.com/nabla-c0d3/sslyze.git ======= SSLyze 快速且功能全面的 SSL 扫描器。 描述 SSLyze 是一个 Python 工具，可通过连接服务器分析其 SSL...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

catnip

Cat-Nip Automated Basic Pentest Tool this tool will make your basic pentesting task like Information Gathering, Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone Cat-Nip git clone https://github.com/baguswiratmaadi/catnip Go Inside Cat-Nip Dir c...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

Dex discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers

Summary Dex 2.37.0 is serving HTTPS with insecure TLS 1.0 and TLS 1.1. Details While working on https://github.com/dexidp/dex/issues/2848 and implementing configurable TLS support, I noticed my changes did not have any effect in TLS config, so I started investigating...

GHSA-GR79-9V6V-GC9R Dex discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers

Summary Dex 2.37.0 is serving HTTPS with insecure TLS 1.0 and TLS 1.1. Details While working on https://github.com/dexidp/dex/issues/2848 and implementing configurable TLS support, I noticed my changes did not have any effect in TLS config, so I started investigating...

Faraday v3.6 - Collaborative Penetration Test and Vulnerability Management Platform

Here are the main new features and improvements in Faraday v3.6: WelcomeService Now A new way to send vulnerabilities is available! We integrated Faraday with Service Now, giving you more options to work with. Burp plugin was totally revamped We have been working hard to make several changes to...

Fast and Full Featured SSL Scanner: SSLyze

SSLyze is a Python tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive, and should help organizations and testers identify mis-configurations affecting their SSL servers. SSLyze is all Python code but it uses an OpenSSL wrapper...

BackTrack 5 R2 Released, New Kernel, New Tools

BackTrack 5 R2 Released, New Kernel, New Tools Hacker are your Ready ? Backtrack 5 R2 finally released with bug fixes, upgrades, and the addition of 42 new tools. With the best custom-built 3.2.6 kernel, the best wireless support available at maximum speed. This release have included Metasploit...