vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra...

vajra

一个用于 Web 应用程序的自动化 Web 黑客框架 目录 关于 Vajra 什么是 Vajra 主要特性 Vajra 的功能 安装 使用 docker-compose 运行 Vajra 使用的工具...

Mythic

Mythic A cross-platform, post-exploit, red teaming framework built with GoLang, docker, docker-compose, and a web browser UI. It's designed to provide a collaborative and user friendly interface for operators, managers, and reporting throughout red teaming. Check out a series of YouTube videos...

waymore

About - v8.9 The idea behind waymore is to find even more links from the Wayback Machine plus other sources than other existing tools. 👉 The biggest difference between waymore and other tools is that it can also download the archived responses for URLs on wayback machine and URLScan so that you c...

lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...

kanha

Kanha - A web-app pentesting suite written in rust 🦀 Installation ⦾ Subcommands ⦾ Contribute Kanha is a tool that can help you perform, a variety of attacks based on the target domain . With just kanha you can do, Fuzzing, Reverse dns lookup, common http response, subdomain takeover detection and...

gitleaks

Gitleaks root@kitploit: ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ !WARNING Gitleaks is feature complete. I'm not merging new features into Gitleaks. Future releases will be security patches only. I'm shifting my focus to Betterleaks...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

web

Bloqueo de anuncios en toda tu red con tu propio hardware Linux Sitio web de Pi-hole | Documentación | Foro de Discourse | Donar Interfaz web de Pi-hole La interfaz web de Pi-hole® basada en AdminLTE proporciona un lugar central para administrar tu Pi-hole y revisar las estadísticas generadas por...

web

Network-wide ad blocking via your own Linux hardware Pi-hole website | Documentation | Discourse Forum | Donate Pi-hole Web Interface Pi-hole®'s Web interface based off of AdminLTE provides a central location to manage your Pi-hole and review the statistics generated by FTLDNS™. Easy-to-interpret...

arachni

Notice Arachni has become obsolete, try out its next-gen successor Ecsypno Spectre Scan! Arachni - Web Application Security Scanner Framework Synopsis Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the...

shadowd

Logo Shadow Daemon 是一个 Web 应用防火墙 ，它在应用层拦截请求。 该仓库包含 Shadow Daemon 的主要组件，负责请求的分析和存储。 文档 完整文档请参考 shadowd.zecure.org。 安装 准备 使用 cmake 来配置和准备项目。建议为此创建一个单独的目录。 典型的安装过程如下所示： root@kitploit: mkdir build cd build cmake -DCMAKEINSTALLPREFIX:PATH=/usr -DCMAKEBUILDTYPE=Release .. 编译 如果 cmake 成功运行，它将生成一个...

shadowd

Logo Shadow Daemon is a web application firewall that intercepts requests at the application level. This repository contains the main component of Shadow Daemon that handles the analysis and storage of requests. Documentation For the full documentation please refer to shadowd.zecure.org...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

quarantyne

=== 此项目已归档 === Quarantyne · 现代 Web 防火墙 🛃 自动化网络安全，如此简单 太长不看 Quarantyne 是一个反向代理，可实时保护 Web 应用和 API 免受欺诈行为、滥用、机器人及网络攻击。 系统要求 简介 功能特性 覆盖范围 被动模式 vs 主动模式 配置 快速运行 发行版本 邮件列表 许可证 系统要求 Java 8 简介 Quarantyne 是一个用 Java 编写的反向代理。它位于 Web 应用或 API 之前，保护其免受欺诈行为、滥用、机器人及网络攻击的侵害。它无法阻止所有攻击，但绝对会让攻击变得更加困难且成本更高。...

gryffin

ARCHIVED Gryffin beta Gryffin is a large scale web security scanning platform. It is not yet another scanner. It was written to solve two specific problems with existing scanners: coverage and scale. Better coverage translates to fewer false negatives. Inherent scalability translates to capabilit...

gryffin

已归档 Gryffin（测试版） Gryffin 是一个大规模 Web 安全扫描平台。它并非又一款扫描器，而是为了解决现有扫描器存在的两个特定问题而编写：覆盖率 和 可扩展性 。 更好的覆盖率意味着更少的漏报。固有的可扩展性意味着能够扫描并支持大型弹性应用基础设施。简单来说，就是通过简单的水平扩展，能够从今天扫描 1000 个应用扩展到明天扫描 100,000 个应用。 覆盖率 覆盖率有两个维度——爬取阶段和模糊测试阶段。在爬取阶段，覆盖率意味着能够尽可能多地发现应用的足迹。在扫描阶段（或模糊测试时），覆盖率意味着能够深入测试应用的每个部分，针对一组应用的漏洞进行测试。 爬取覆盖率...

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

Bashter

Bashter 4.1 Web Crawler, Scanner, and Analyzer Framework Shell-Script based...

golismero

GoLismero 是什么？ GoLismero 是一个用于安全测试的开源框架。它目前主要针对 Web 安全，但可以轻松扩展到其他类型的扫描。 该框架最有趣的功能包括： 真正的平台独立性。已在 Windows、Linux、BSD 和 OS X 上测试通过。 没有原生库依赖。整个框架完全用纯 Python 编写。 与使用 Python 和其他脚本语言编写的其他框架相比，性能良好。 非常易于使用。 插件开发极其简单。 该框架还收集并统一了知名工具的结果：sqlmap、xsser、openvas、dnsrecon、theharvester... 与标准集成：CWE、CVE 和 OWASP。...