xwf-yara-scanner

Overview This X-Ways Forensics X-Tension allows the use of YARA within X-Ways natively. It uses both the X-Ways Forensics API and the YARA API to achieve this. Note: This is an open source project, not a formal CrowdStrike product. There are many benefits to running YARA within X-Ways, versus...

vhosts-sieve

VHosts Sieve Searching for virtual hosts among non-resolvable domains. Installation root@kitploit: git clone https://github.com/dariusztytko/vhosts-sieve.git pip3 install -r vhosts-sieve/requirements.txt Usage Get a list of subdomains e.g. using Amass root@kitploit: $ amass enum -v -passive -o...

vhosts-sieve

VHosts Sieve 名前解決できないドメインからバーチャルホストを検索します。 インストール root@kitploit: git clone https://github.com/dariusztytko/vhosts-sieve.git pip3 install -r vhosts-sieve/requirements.txt 使用方法 サブドメインのリストを取得します（例：Amassを使用） root@kitploit: $ amass enum -v -passive -o domains.txt -d example.com -d example-related.com...

JSpector

JSpector JSpector is a Burp Suite extension that passively crawls JavaScript files and automatically creates issues with URLs, endpoints and dangerous methods found on the JS files. Prerequisites Before installing JSpector, you need to have Jython installed on Burp Suite. Installation 1. Download...

autoenum

root@kitploit: / / / // / / // // \ / \ / \ / / / // \ / // // // // / / // // // / / // // // / / / / / ,/ ,/ / / /// // ,/// // // Summary Autoenum is a recon tool which performs automatic enumeration of services discovered. I built this to save some time during CTFs and pen testing...

kraken

Krakenは、Windows、Mac、FreeBSD、Linux向けにビルド可能なシンプルなクロスプラットフォームYaraスキャナーです。主にインシデント対応、研究、アドホック検出を目的としています（ エンドポイント保護用ではありません ）。以下が主な機能です： 提供されたYaraルールを使用して、実行中の実行ファイルと実行中のプロセスのメモリをスキャンします（go-yaraを活用）。 自動実行用にインストールされた実行ファイルをスキャンします（go-autorunsを活用）。 提供されたYaraルールでファイルシステムをスキャンします。...

kraken

Kraken is a simple cross-platform Yara scanner that can be built for Windows, Mac, FreeBSD and Linux. It is primarily intended for incident response, research and ad-hoc detections not for endpoint protection. Following are the core features: Scan running executables and memory of running process...

Exploitivator

Exploitivator V2.0 - modified to use Python 3 Prerequisites This has only been tested on Kali. It depends on the pymetasploit3 module for Python, described in detail here: https://coalfire.com/the-coalfire-blog/pymetasploit3-metasploit-automation-library Install the necessary Kali packages and th...

BurpSuite-Asset_Discover

BurpSuite Extension - Asset Discover Burp Suite extension to discover assets from HTTP response using passive scanning. Refer our blog Asset Discovery using Burp Suite for more details. The extension is now part of the BApp store and can be installed directly from the Burp Suite...

Bug-Bounty-Arsenal-v.3

BugBounty Arsenal A free, full-stack security scanning platform for bug bounty hunters and security researchers — 50+ detectors, continuous monitoring, and CI/CD gating from a single dashboard. ▶ Live app:bugbounty-arsenal.net — free, no credit card. If this is useful, please ⭐ the repo — it...

vulscan

vulscan - Nmapを使用した脆弱性スキャン 概要 Vulscanは、nmapを脆弱性スキャナーに拡張するモジュールです。nmapオプション -sV はサービスごとのバージョン検出を有効にし、特定された製品に応じた潜在的な欠陥を特定するために使用されます。データはオフラインバージョンのVulDBで検索されます。 インストール 以下のNmapインストールのフォルダにファイルをインストールしてください： root@kitploit: Nmap\scripts\vulscan\ 以下のようにGitHubリポジトリをクローンします： root@kitploit: git clone...

vulscan

vulscan - Vulnerability Scanning with Nmap Introduction Vulscan is a module which enhances nmap to a vulnerability scanner. The nmap option -sV enables version detection per service which is used to determine potential flaws according to the identified product. The data is looked up in an offline...

red-detector

Red-Detector Description Scan your EC2 instance to find its vulnerabilities using Vuls https://vuls.io/en/. Audit your EC2 instance to find security misconfigurations using Lynis https://cisofy.com/solutions/lynis. Scan your EC2 instance for signs of a rootkit using Chkrootkit...

red-detector

Red-Detector 説明 Vuls https://vuls.io/en/ を使用して EC2 インスタンスの脆弱性をスキャンします。 Lynis https://cisofy.com/solutions/lynis を使用して EC2 インスタンスのセキュリティ設定ミスを監査します。 Chkrootkit http://www.chkrootkit.org/ を使用して EC2 インスタンスにルートキットの兆候がないかスキャンします。 要件 1. 以下に示す EC2 アクションが設定された AWS アカウント。これらの要件を含むポリシーは...

Fast-Google-Dorks-Scan

Fast Google Dorks Scan The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated. Usage example:...

jsecret

jsecret simple and fast tool to detect sensitive data in the source code such as javascript files or others install go install -v github.com/raoufmaklouf/jsecret@latest Usage cat jsfiles.txt | jsceret echo http://test.tld/main.js | jsecret Big thank to https://twitter.com/medmahmoudi619 for helpf...

EDRHunt

EDRHunt EDRHunt scans Windows services, drivers, processes, registry, wmi for installed EDRs Endpoint Detection And Response. Read more about EDRHunt here. Install Binary Download the latest release from the release section. Releases are built for windows/amd64. Go Requires Go to be installed on...

api-scanner-docker

API Scanner - Self-Hosted Deployment API Scanner is an automated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specifications and WSDL files. Prerequisites Docker Engine 20.10+ Docker Compose v2 Python 3.6+ for setup script 8 GB RAM minimum 16 G...

pisc

Public OCI-Image Security Checker What is it? PISC Public OCI-Image or docker-image Security Checker is command-line tool to assess the security of OCI container images. Exits with code 1 if any of the following conditions are met: malware 🍄 exploits 🐙, hack-tools 👾, backdoors 🐴, crypto-miners 💰,...

BugBountyScanner

BugBountyScanner A Bash script and Docker image for Bug Bounty reconnaissance, intended for headless use. Low on resources, high on information output. Helpful? BugBountyScanner helped you net a bounty? Description ⚠ Note: Using the script over a VPN is highly recommended. It's recommended to run...