14 matches found
Zeus-Scanner
实用链接目录 什么是 Zeus Zeus 的功能特性 要求与安装 Ubuntu/Debian centOS 其他 屏幕截图 演示视频 使用手册 Zeus 的工作原理 功能 使用 Zeus 向 sqlmap 传递参数 法律信息 许可证（GPL） 行为准则 报告 Bug 发起拉取请求 贡献指南 向 Zeus 捐赠 致谢 Zeus-Scanner 什么是 Zeus？ Zeus 是一款高级侦察工具，旨在让 Web 应用侦察变得简单。Zeus 内置强大的 URL 解析引擎，支持多种搜索引擎，能够从 Google Dork 和 WebCache 中提取...
hoper
Hoper 它显示您指定的 URL 到达其端点所经过的所有跳转。 例如，如果您想查看邮件中的 URL 或 URL 缩短器的完整路径，Hoper 会返回所有 URL 重定向。 安装 root@kitploit: $ gem install hoper 使用 在命令行中输入： root@kitploit: $ hoper url 开发 检出仓库后，运行 bin/setup 安装依赖。您也可以运行 bin/console 进入交互式提示，以便进行实验。 要将此 gem 安装到本地机器，请运行 bundle exec rake install。要发布新版本，请在 version.rb...
DATA
DATA：凭证钓鱼分析与自动化 Slides from presentation at CircleCityCon 2017 在无头Ubuntu Server 16.04上测试 BUCKLEGRIPPER py 给定一个疑似钓鱼URL或一个每行一个URL的文件，访问、截图并抓取感兴趣的文件。 可以通过运行或查看 installbucklegripperdeps.sh 来安装依赖项。 root@kitploit: usage: bucklegripper.py -h -u URL -s SOURCE -r READFILE -a USERAGENT 访问一个疑似钓鱼页面，截图并从中掠夺钓鱼...
TekDefense-Automater
TekDefense-Automater Versión: 0.21 http://www.tekdefense.com/automater/ http://www.tekdefense.com/news/2013/12/4/finally-the-new-automater-release-is-out.html Automater es una herramienta que originalmente creé para automatizar el análisis OSINT de direcciones IP. Rápidamente creció y se convirti...
3 SOC Process Fixes That Unlock Tier 1 Productivity
What is really slowing Tier 1 down: the threat itself or the process around it? In many SOCs, the biggest delays do not come from the threat alone. They come from fragmented workflows, manual triage steps, and limited visibility early in the investigation. Fixing those process gaps can help Tier ...
Phishing Detection System: An Ensemble Approach Using Character-Level CNN and Feature Engineering
In actuality, phishing attacks remain one of the most prevalent cybersecurity risks in existence today, with malevolent actors constantly changing their strategies to successfully trick users. This paper presents an AI model for a phishing detection system that uses an ensemble approach to combin...
Dual-Path Phishing Detection: Integrating Transformer-Based NLP with Structural URL Analysis
Phishing emails pose a persistent and increasingly sophisticated threat, undermining email security through deceptive tactics designed to exploit both semantic and structural vulnerabilities. Traditional detection methods, often based on isolated analysis of email content or embedded URLs, fail t...
Client-Side Zero-Shot LLM Inference for Comprehensive In-Browser URL Analysis
Malicious websites and phishing URLs pose an ever-increasing cybersecurity risk, with phishing attacks growing by 40% in a single year. Traditional detection approaches rely on machine learning classifiers or rule-based scanners operating in the cloud, but these face significant challenges in...
MultiPhishGuard: an LLM-Based Multi-Agent System for Phishing Email Detection
Phishing email detection faces critical challenges from evolving adversarial tactics and heterogeneous attack patterns. Traditional detection methods, such as rule-based filters and denylists, often struggle to keep pace with these evolving tactics, leading to false negatives and compromised...
The vulnerability of the UriComponentsBuilder component in the Spring Framework’s URL analysis mechanism allows attackers to perform SSRF attacks.
The vulnerability of the UriComponentsBuilder component in the Spring Framework’s URL analysis module exists due to insufficient validation of data entered by users. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...
Watch out for the email that says “You have a new voicemail!”
A phishing campaign is using voicemail notification messages to go after victims Office 365 credentials. According to researchers at ZScaler, the campaign uses spoofed emails with an HTML attachment that contains encoded javascript. The email claims that you have a new voicemail and that you can...
The vulnerability of the Firefox browser, which allows a violator to obtain confidential information
The vulnerability of the Firefox browser’s URL analysis process is related to the improper recognition of escaped characters in host names within the Location header. Exploiting this vulnerability can allow a malicious actor to access protected information by redirecting users to another website...
[Automater 1.2] IP and URL Analysis Tool
Automater is a IP and URL Analysis tool we created to help automate the analysis process. You can see a video of Automater in action in TekTip episode 15. Download Automater 1.2...
