easy_security

easysecurity Progetto con sublist3r, massan, CVE-2018-15473, ssh bruteforce, ftp bruteforce e nikto...

AlienTec-Recon-Tool

AlienTec 👽 Recon-Tool ❤️ Il Tuo Supporto Fa la Differenza Grazie per aver utilizzato AlienTec Recon-Tool! Questo è un progetto nato per passione e sarà sempre disponibile come versione gratuita e open-source. Il tuo supporto aiuta ad accelerare lo sviluppo della pianificata versione Pro e consente...

paskto

Paskto - Scanner Web Passivo Paskto eseguirà una scansione passiva del web utilizzando l'indice internet Common Crawl, scaricando gli indici su richiesta o analizzando i dati dal tuo sistema locale. Gli URL vengono quindi elaborati attraverso Nikto e liste di URL noti per identificare contenuti...

nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 Documentazione completa - https://github.com/sullo/nikto/wiki Esecuzione normale: root@kitploit: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h...

kaboom

About Kaboom is an automatism for penetration tests. It performs several tasks for the first two phases of the test: information gathering and vulnerability assessment. All informations collected are saved into a directory hierarchy very simple to browse also in case of multiple targets. Details...

OSTE-Meta-Scan

OSTE-Meta-Scanner Dieses Projekt wird nun von OSTE gewartet und unterstützt und ist nicht mehr als Open-Source-Projekt verfügbar. Für Anfragen, kommerzielle Nutzung oder Support wenden Sie sich bitte an OSTE über LinkedIn, die offizielle Website oder das Vertriebsteam unter +213.7.98.38.94.54 via...

reverie

reverie Strumenti di pentest automatizzati progettati per Parrot Linux Questo strumento automatizzerà le tue attività di pentesting di base come la raccolta di informazioni, l'audit di sicurezza e la generazione di report, eseguendo ogni operazione in modo completamente automatico. Guida all'uso...

paskto

Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

Nikto Web Scanner 2.6.1

Nikto is an Open Source web server scanner which performs comprehensive tests against web servers for multiple items, including over 3500 potentially dangerous files/CGIs, versions on over 900 servers, and version specific problems on over 250 servers...

web-exploitation-lab

🌐 Web Exploitation Lab Payloads, techniques et cheatsheet w...

ExploitIQ

⚡ ExploitIQ Autonomous AI-Powered Penetration Testing Assis...

cyart-vapt-week-2

cyart-vapt-team This repository contains the Week 2 VAPT lab w...

EUVD-2005-2861

Malware in sbrugna...

redteam-notebook

It is an offensive tool for network and web exploitation. The repository, redteam-notebook, contains a collection of commands, tips, and tricks for preparation and execution of red teaming activities, specifically for the OSCP exam. The primary vulnerability targeted is not explicitly stated, but...

Linux Distros Unpatched Vulnerability : CVE-2018-11652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header,...

Sr2T - Converts Scanning Reports To A Tabular Format

Scanning reports to tabular sr2t This tool takes a scanning tool's output file, and converts it to a tabular format CSV, XLSX, or text table. This tool can process output from the following tools: 1. Nmap XML; 2. Nessus XML; 3. Nikto XML; 4. Dirble XML; 5. Testssl JSON; 6. Fortify FPR. Rationale...

SUSE CVE-2018-11652

CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV report...

GHSA-X89R-2WJQ-MJ7X Apache Tomcat Discloses MS-DOS Pathname

Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto...