uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

assetfinder

assetfinder 查找可能与给定域名相关的域名和子域名。 安装 如果你已安装并配置好 Go（即 $GOPATH/bin 已在 $PATH 中）： root@kitploit: go get -u github.com/tomnomnom/assetfinder 否则，请为你所使用的平台下载一个发布版本。为了方便执行，你可以将二进制文件放到 $PATH 中。 用法 root@kitploit: assetfinder --subs-only 数据源 欢迎通过 pull request 提交新的数据源！: 已实现 crt.sh certspotter hackertarget...

Yelp: Server-side request forgery (ssrf)

.yelp-support.com Summary: Server-side request forgery Platforms Affected: www.yelp-support.com Steps To Reproduce: 1. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details. 2. your server has redirect to malicious website 3. i am...

Fedora: Security Advisory for assetfinder (FEDORA-2022-5ef0bd9a27)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: assetfinder-0.1.0-7.fc36

Find domains and subdomains related to a given domain...

Fedora: Security Advisory for assetfinder (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: assetfinder-0.1.0-6.fc35

Find domains and subdomains related to a given domain...

Fedora: Security Advisory for assetfinder (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: assetfinder-0.1.0-6.fc36

Find domains and subdomains related to a given domain...

Garud - An Automation Tool That Scans Sub-Domains, Sub-Domain Takeover And Then Filters Out XSS, SSTI, SSRF And More Injection Point Parameters

An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters. Requirements: Go Language, Python 2.7 or Python 3. System requirements: Recommended to run on vps with 1VCPU and 2GB ram. Tools used - You must need to install...