Argus

Pythonベースの情報収集と偵察のためのツールキット プロジェクトについて Argusは、情報収集と偵察のプロセスを効率化するために設計された、Python搭載のオールインワンツールキットです。クリーンで直感的なインターフェースと、幅広い信頼性の高いモジュールを統合し、アナリストがネットワーク、Webアプリケーション、セキュリティ環境を一貫性と精度で効率的に評価できるようにします。 ⚠️ 警告：法的免責事項 このツールは教育目的および倫理的な使用のみ...

udp-hunter

UDP Hunterとは？ UDPスキャンは常に遅くて面倒な作業であり、UDPにIPv6を追加すると、ツールの選択肢が非常に限られてきます。UDP Hunterは、UDPサービススキャンに特化したPythonベースのオープンソースネットワーク評価ツールです。UDP Hunterでは、IPv6およびIPv4ホスト向けに広く知られているUDPプロトコルの監査を提供することに重点を置いています。現在、UDP...

Network_Assessment

ネットワーク評価 Wireshark や TCPdump を使用すると、監視対象のネットワーク上で記録したネットワークトラフィックに有害なアクティビティがあるかどうかを判断できます。 この Python スクリプトは、指定された .pcap ファイルのネットワークトラフィックを解析し、以下の不審なネットワークアクティビティや攻撃を検出しようとします： 1. DNS トンネリング 2. SSH トンネリング 3. TCP セッションハイジャック 4. SMB 攻撃 5. SMTP または DNS 攻撃 6. IPv6 フラグメンテーション攻撃 7. TCP RST 攻撃 8. SYN...

Explaining External Network Assessment with Vector Command

Learn how external network assessment works within Vector Command, Rapid7’s continuous red team managed service. Understanding threat exposure management Let’s start by providing some context around where Vector Command fits into a security program and more specifically Continuous Threat Exposure...

DoSinator - A Powerful Denial Of Service (DoS) Testing Tool

DoSinator is a versatile Denial of Service DoS testing tool developed in Python. It empowers security professionals and researchers to simulate various types of DoS attacks, allowing them to assess the resilience of networks, systems, and applications against potential cyber threats. Features...

Five Steps to Integrating a Data Repository Vulnerability Assessment Into A WAF–Driven Vulnerability Management Program

A vulnerability assessment is a systematic review of security weaknesses in an information system. It evaluates if the system is susceptible to any known vulnerabilities, assigns severity levels to those vulnerabilities, and recommends remediation or mitigation, if and whenever needed. There are...

UDP-Hunter - Network Assessment Tool For Various UDP Services Covering Both IPv4 And IPv6 Protocols

UDP Scanning has always been a slow and painful exercise, and if you add IPv6 on top of UDP, the tool choices get pretty limited. UDP Hunter is a python based open source network assessment tool focused on UDP Service Scanning. With UDP Hunter, we have focused on providing auditing of widely know...

FEMA Exposes PII for Millions of Hurricane, Wildfire Survivors

The Federal Emergency Management Agency exposed the personal identifiable information of 2.3 million survivors of hurricanes Harvey, Irma and Maria and the California wildfires in 2017, by oversharing survivor data with a contractor when it wasn’t necessary. Worse, the contractor’s networks has...

zANTI 2.0 - Android Network Toolkit

zANTI is a mobile penetration testing toolkit that lets security managers assess the risk level of a network with the push of a button. This easy to use mobile toolkit enables IT Security Administrators to simulate an advanced attacker to identify the malicious techniques they use in the wild to...

Department of Homeland Security Releases Cyber Security Evaluation Tool (CSET)

Department of Homeland Security Releases Cyber Security Evaluation Tool CSET The Cyber Security Evaluation Tool CSET is a Department of Homeland Security DHS product that assists organizations in protecting their key national cyber assets. It was developed under the direction of the DHS National...

smb-enum-domains NSE Script

Attempts to enumerate domains on a system, along with their policies. This generally requires credentials, except against Windows 2000. In addition to the actual domain, the "Builtin" domain is generally displayed. Windows returns this in the list of domains, but its policies don't appear to be...