ccs

Code Credential Scanner This script is intended to scan a large, diverse codebase for hard-coded credentials, or credentials present in configuration files. These represent a serious security issue, and can be extremely hard to detect and manage. The specific focus of this script is to create a...

Fern Pattern Scanner

Escáner de Patrones Fern Bienvenido al Escáner de Patrones de Fern. Este escáner examina los archivos sugeridos y encuentra cualquier patrón indicado en el rules/rules.yaml usando regex. Luego se genera un informe con todos los hallazgos. Este proyecto se utiliza para demostrar cómo se puede...

PT-2026-76735

Name of the Vulnerable Software and Affected Versions sqlparse versions prior to 0.6.0 Description sqlparse contains a Regular Expression Denial of Service ReDoS issue where the lexer repeatedly scans unmatched dollar-quoted literals and multiline-comment delimiters. This occurs because the regex...

Arjun v1.3 - HTTP Parameter Discovery Suite

Features Multi-threading 4 modes of detection A typical scan takes 30 seconds Regex powered heuristic scanning Huge list of 25,980 parameter names Makes just 30-35 requests to the target Usage Note: Arjun doesn't work with python 3.4 Discover parameters To find GET parameters, you can simply do:...