xray

Welcome to xray 👋 A Powerful Security Assessment Tool 🏠 Documentation • ⬇️ Download xray • ⬇️ Download xpoc • ⬇️ Download xapp • 📖 Plugin Repository 中文版 Note: xray is not open source, just download the built binary files directly. The repository mainly contains community-contributed POCs. Each xray...

jaeles-signatures

This project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine This repo only contain Default Signatures for Jaeles project. Pull requests or any ideas are welcome. Please read the Official Documentation here for writing your own signature. Installation jaeles config...

Optiva-Framework

Optiva-Framework 🕵️ Webアプリケーションスキャナ 💉 Author : Joker-Security dev-labs ✔️ 説明 : このフレームワークは、あなたのウェブサイトの脆弱性を発見してセキュリティをチェックするために使用できます。また、dorkによるSQLインジェクションの管理者パネル検索、情報収集、ハッシュの暗号化にも使用できます。 ✔️ 機能 : 情報モジュール : ポートスキャナ Whoisルックアップ リバースIPドメインルックアップ HTTPヘッダードメインルックアップ Iplocator IP地理位置情報取得 ハッシュモジュール : Md5...

htcap

HTCAP htcap은 싱글 페이지 애플리케이션SPA을 재귀적으로 크롤링할 수 있는 웹 애플리케이션 스캐너로, Ajax 호출과 DOM 변경을 가로챕니다. 주요 기능 재귀적 DOM 크롤링 엔진 ajax/fetch/jsonp/websocket 요청 발견 쿠키, 프록시, 사용자 정의 헤더, HTTP 인증 등 지원 텍스트 유사성을 기반으로 하는 휴리스틱 페이지 중복 제거 엔진 스크립트 가능한 로그인 시퀀스 모든 발견 사항은 sqlite 데이터베이스에 저장되며 대화형 HTML 보고서로 내보낼 수 있습니다. 내장된 퍼저는 SQL 인젝션,...

CVE-2024-42206: Undefined Security Weakness

HCL iReflection Third party vulnerable and outdated components issue was detected in the web application...

Wapiti Web Application Vulnerability Scanner 3.3.0

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the source code release...

WEB-APPLICATION-VULNERABILITY-SCANNER

WEB-APPLICATION-VULNERABILITY-SCANNER This task focuses on dev...

Wapiti Web Application Vulnerability Scanner 3.2.9

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the binary release...

Wapiti Web Application Vulnerability Scanner 3.2.7 Source Code

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the source code release...

Web-Vulnerability-Scanner

Web Application Vulnerability Scanner Internship Task - 2...

jaeles

This is a powerful, flexible, and easily extensible framework written in Go for building your own Web Application Scanner. The framework is called Jaeles and is designed to be highly customizable. It has a modular architecture, allowing users to easily add or remove plugins to suit their needs. T...

Wapiti Web Application Vulnerability Scanner 3.2.5 Source Code

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the source code release...

Wapiti Web Application Vulnerability Scanner 3.2.5

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the binary release...

VegaBird Vooki 安全漏洞

VegaBird Vooki is a free web application vulnerability scanning tool from VegaBird Open Source that helps users to scan any web application and find vulnerabilities.Vooki consists of three main parts: a web application scanner, a Rest API scanner, and a reporting feature. VegaBird Vooki version...

The vulnerability of the OWASP Zed Attack Proxy, a security scanner for web applications, arises from improper verification of certificate authenticity. This allows attackers to compromise the integrity of the protected information.

The vulnerability of the OWASP Zed Attack Proxy web application scanner is related to improper verification of certificate authenticity. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

Login Form Cross-Site Request Forgery

Cross Site Request Forgery CSRF occurs when an user is tricked into clicking on a link which would automatically submit a request without the user's consent. This can be made possible when the request does not include an anti-CSRF token, generated each time the request is visited and passed when...

Atlassian Jira 8.6.x < 8.13.1 Cross-Site Request Forgery

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.10 or 8.6.x prior to 8.13.1. It is, therefore, affected by a Cross-Site Request Forgery CSRF vulnerability, following an Information Disclosure vulnerability in the referr...

Zurmo 3.2.6 Persistent Cross Site Scripting

Stored Cross-site Scripting Vulnerability in Zurmo 3.2.6 Information -------------------- Advisory by Netsparker Name: Stored Cross-site Scripting in Zurmo Affected Software: Zurmo Affected Versions: 3.2.6 Homepage: http://zurmo.org Vulnerability: Stored Cross-site Scripting Severity: Medium...

First look at Tenable.io Web Application Scanner (WAS)

When Tenable firstly announced Web Application Security scanner as a part of their new Tenable.io platform, it was quite intriguing. Certainly, they already had some WAS functionality before in Nessus. For example, path traversal check was pretty good. But this functionality was quite fragmental...

AngularJS < 1.6.1 Cross-Site Scripting

According to its self-reported version number, AngularJS is prior to 1.6.1. Therefore, it may be affected by a JSONP callback vulnerability than can lead to Cross-Site Scripting XSS. Note that the scanner has not tested for these issues but has instead relied only on the application's self-report...