sqlmate

sqlmate 有一些我们认为 SQLMap 应该具备的功能。比如查找目标的管理员面板，更好的哈希破解等。如果你也这么认为，SQLMate 就是为你准备的。 它的功能？ 通过 --dork 选项提供一个 SQL 注入 dork，它将为你找到易受攻击的网站。之后，它会尝试找到它们的管理员面板，并尝试使用 SQL 查询绕过它们。 它可以对 MD5、SHA1 和 SHA2 进行非常快速的哈希查找。你可以通过 --hash 选项提供哈希。平均查找时间不到 2 秒。 你也可以提供一个包含哈希的 txt 文件，通过 --list 选项进行破解。 第一种模式只检查 13...

UPDATE: XSStrike 3.1.2

PenTestIT RSS Feed My initial post about this advanced XSS detection and exploitation suite was almost an year ago! Three days ago, an update - XSStrike 3.1.2 was released. This is a post that documents these changes. What is XSStrike? XSStrike is a Cross Site Scripting detection suite equipped...

Decodify - Detect And Decode Encoded Strings Recursively

Decodify can detect and decode encoded strings, recursively. Its currently in beta phase. Lets take this string : teamultimate.in and encode it with Hex, URL, Base64 and FromChar encoding, respectively. Now lets pass this encoded string to Decodify: Boom! Thats what Decodify does. Supported...

ReconDog - An All In One Tool For All Your Basic Information Gathering Needs

Recon Dog is an all in one tool for all your basic information gathering needs. It uses APIs to gather all the information so your identity is not exposed. Downloading and running Recon Dog Enter the following command in the terminal to download it git clone...