ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

sslyze

SSLyze SSLyze 是一个快速且强大的 SSL/TLS 扫描工具和 Python 库。 SSLyze 可以通过连接到服务器来分析其 SSL/TLS 配置，以确保服务器使用强加密设置（证书、密码套件、椭圆曲线等），并且不易受到已知 TLS 攻击（如 Heartbleed、ROBOT、OpenSSL CCS 注入等）的影响。 主要功能 注重速度和可靠性：SSLyze 是一个经过实战检验的工具，每天用于可靠扫描 数十万 个服务器。 易于投入运营：SSLyze 可以直接从 CI/CD 中运行，以持续检查服务器是否符合 Mozilla 推荐的 TLS 配置。 提供完善的文档化 Python...

sslyze

SSLyze SSLyze is a fast and powerful SSL/TLS scanning tool and Python library. SSLyze can analyze the SSL/TLS configuration of a server by connecting to it, in order to ensure that it uses strong encryption settings certificate, cipher suites, elliptic curves, etc., and that it is not vulnerable ...

reverie

reverie 为 Parrot Linux 设计的自动化渗透测试工具 此工具将使您的基础渗透测试任务（如信息收集、安全审计和报告）实现全自动化。 使用指南 下载/克隆 git clone https://github.com/baguswiratmaadi/reverie 进入 reverie 目录 cd reverie 赋予 reverie 权限 chmod 777 .sh 无需安装直接运行 reverie ./reverie.sh 如果你想安装 reverie ./install.sh 更新日志 1.0 首次发布并修复 Nikto 命令行中的错误 Reverie 自动执行的渗透测试...

sslyze

注意 目前 SSLyze 的开发已转移至单独的代码仓库： https://github.com/nabla-c0d3/sslyze. 本仓库会定期从新父仓库同步更新，但如需最新版本，请查看新仓库。如果你已克隆本仓库但希望追踪新分支，可以使用以下命令更新远程源： git remote set-url origin https://github.com/nabla-c0d3/sslyze.git ======= SSLyze 快速且功能全面的 SSL 扫描器。 描述 SSLyze 是一个 Python 工具，可通过连接服务器分析其 SSL 配置。它旨在快速全面，帮助组织与测试人员识别影响其...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

catnip

Cat-Nip Automated Basic Pentest Tool this tool will make your basic pentesting task like Information Gathering, Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone Cat-Nip git clone https://github.com/baguswiratmaadi/catnip Go Inside Cat-Nip Dir c...

Dex discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers

Summary Dex 2.37.0 is serving HTTPS with insecure TLS 1.0 and TLS 1.1. Details While working on https://github.com/dexidp/dex/issues/2848 and implementing configurable TLS support, I noticed my changes did not have any effect in TLS config, so I started investigating...

GHSA-GR79-9V6V-GC9R Dex discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers

Summary Dex 2.37.0 is serving HTTPS with insecure TLS 1.0 and TLS 1.1. Details While working on https://github.com/dexidp/dex/issues/2848 and implementing configurable TLS support, I noticed my changes did not have any effect in TLS config, so I started investigating...

Faraday v3.6 - Collaborative Penetration Test and Vulnerability Management Platform

Here are the main new features and improvements in Faraday v3.6: WelcomeService Now A new way to send vulnerabilities is available! We integrated Faraday with Service Now, giving you more options to work with. Burp plugin was totally revamped We have been working hard to make several changes to...

Fast and Full Featured SSL Scanner: SSLyze

SSLyze is a Python tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive, and should help organizations and testers identify mis-configurations affecting their SSL servers. SSLyze is all Python code but it uses an OpenSSL wrapper...

BackTrack 5 R2 Released, New Kernel, New Tools

BackTrack 5 R2 Released, New Kernel, New Tools Hacker are your Ready ? Backtrack 5 R2 finally released with bug fixes, upgrades, and the addition of 42 new tools. With the best custom-built 3.2.6 kernel, the best wireless support available at maximum speed. This release have included Metasploit...