frogy2.0

Orbis - 攻击面情报 全频谱攻击面情报 Orbis 自动映射您组织的整个互联网暴露攻击面：子域名、开放端口、Web应用程序、云基础设施、TLS证书、邮件安全态势、暴露的密钥、登录面板等，然后对每个发现的资产进行评分和排名，让您精确了解应优先关注的领域。 功能简介 您只需提供域名列表，其余工作由它完成。 您只需提供域名列表，其余工作由它完成。 google.com → Frogy 2.0 discovers: apple.com • 2,000+ subdomains passive + active enumeration example.com • Every open port...

ReconNote

ReconNote Web应用安全侦察自动化框架 该工具以用户输入的域名为起点，通过列出该域名的资产来最大化攻击面，包括 - 子域名：来自 Amass、findomain、subfinder，以及使用 shuffledns 解析的可解析子域名 截图 端口扫描 JS 文件 子域名的 Httpx 状态码 通过模糊测试获得的 Dirsearch 文件/目录路径 安装 1 - 根据你的操作系统，从此处安装 Docker 和 docker-compose - https://docs.docker.com/get-docker/ 2 - git clone...

PenScope

██████╗ ███████╗███╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ███████╗ ██╔══██╗██╔════╝████╗ ██║██╔════╝██╔════╝██╔═══██╗██╔══██╗██╔════╝ ██████╔╝█████╗ ██╔██╗ ██║███████╗██║ ██║ ██║██████╔╝█████╗ ██╔═══╝ ██╔══╝ ██║╚██╗██║╚════██║██║ ██║ ██║██╔═══╝ ██╔══╝ ██║ ███████╗██║...

GWTMap

描述 GWTMap 是一款用于映射基于 Google Web Toolkit GWT 的应用程序攻击面的工具。其目的是帮助提取隐藏在现代化 GWT 应用程序混淆客户端代码中的任何服务方法端点，并尝试生成示例 GWT-RPC 请求载荷与之交互。 更多信息请访问：https://labs.f-secure.com/blog/gwtmap-reverse-engineering-google-web-toolkit-applications。 需求 该脚本需要 Python3、argparse 和 requests 才能运行。可以通过以下命令安装： root@kitploit: python ...

NetLogic

NetLogic Mapeador de Superficie de Ataque Nativo en la Nube y Correlacionador de Vulnerabilidades — v3.0 NetLogic es una plataforma de seguridad de red que combina escaneo activo de puertos, correlación CVE API NVD en vivo, análisis SSL/TLS, auditoría de seguridad HTTP, evaluación de seguridad...

amass

OWASP Amass 项目 OWASP Amass 项目通过开源信息收集和主动侦察技术，执行攻击面网络映射和外部资产发现。 安装 你可以在 Amass 文档 仓库中找到更多安装说明和文档。 企业支持者 贡献 我们非常欢迎新贡献者加入！请查看 CONTRIBUTING.md 了解如何为代码库做贡献，并加入我们的 Discord 服务器 讨论当前项目目标。 故障排除 !code...

OTE

OSINT Template Engine OSINT Template Engine is an experimental tool for OSINT Information gathering & Attack Surface Mapping which uses customizable templates to collect data from sources. It allows for new template creation and modification of existing ones which gives it a competitive advantage...

What Is Attack Surface Mapping And Why It’s Critical To your Security Program

You might think an attack surface mapper is just another name for a vulnerability scanner, but they serve two very different purposes. A scanner tests the assets you already know about for specific weaknesses. An attack surface mapper answers a more fundamental question: What assets do I even hav...

A Practical Guide to Attack Surface Intelligence Mapping

Think of your organization’s digital presence as a sprawling, ever-expanding city. New buildings servers go up, old ones are forgotten, and unofficial shortcuts shadow IT appear overnight. Trying to defend this city without a current map is impossible. You’re left reacting to alarms instead of...

kernel: drm/vmwgfx: Unmap the surface before resetting it on a plane state

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Unmap the surface before resetting it on a plane state Switch to a new plane state requires unreferencing of all held surfaces. In the work required for mob cursors the mapped surfaces started being cached but the...

kernel: drm/vmwgfx: Unmap the surface before resetting it on a plane state

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Unmap the surface before resetting it on a plane state Switch to a new plane state requires unreferencing of all held surfaces. In the work required for mob cursors the mapped surfaces started being cached but the...

CVE-2023-52648

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Unmap the surface before resetting it on a plane state Switch to a new plane state requires unreferencing of all held surfaces. In the work required for mob cursors the mapped surfaces started being cached but the...

UBUNTU-CVE-2023-52648

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Unmap the surface before resetting it on a plane state Switch to a new plane state requires unreferencing of all held surfaces. In the work required for mob cursors the mapped surfaces started being cached but the...

CVE-2023-52648 drm/vmwgfx: Unmap the surface before resetting it on a plane state

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Unmap the surface before resetting it on a plane state Switch to a new plane state requires unreferencing of all held surfaces. In the work required for mob cursors the mapped surfaces started being cached but the...

CVE-2023-52648

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Unmap the surface before resetting it on a plane state Switch to a new plane state requires unreferencing of all held surfaces. In the work required for mob cursors the mapped surfaces started being cached but the...

PT-2024-14678

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.7.0-rc3-vmwgfx Description The vulnerability is related to the drm/vmwgfx module in the Linux kernel. It occurs when switching to a new plane state, which requires unreferencing all held surfaces. However, the...

SpiderSuite - Advance Web Spider/Crawler For Cyber Security Professionals

An advance cross-platform and multi-feature GUI web spider/crawler for cyber security proffesionals. Spider Suite can be used for attack surface mapping and analysis. For more information visit SpiderSuite's website. Installation and Usage Spider Suite is designed for easy installation and usage...

[SECURITY] Fedora 35 Update: asnip-0-0.6.20200618git44ba98b.fc35

Asnip retrieves all IPs used by an organization for surface mapping. It uses the IP or domain name and looks up the Autonomous System Number ASN, retrieves the Classless Inter-Domain Routing CIDR subnet masks and converts them to IPs...

Sub3Suite - A Free, Open Source, Cross Platform Intelligence Gathering Tool

Sub3 Suite is a research-grade suite of tools for Subdomain Enumeration, OSINT Information gathering & Attack Surface Mapping. Supports both manual and automated analysis on variety of target types with many available features & tools. For more information checkout the documentation Screenshots...

Sigurlx - A Web Application Attack Surface Mapping Tool

sigurlx a web application attack surface mapping tool, it does ...: Categorize URLs URLs' categories: endpoint js js style css data json|xml|csv archive zip|tar|tar.gz doc pdf|xlsx|doc|docx|txt media jpg|jpeg|png|ico|svg|gif|webp|mp3|mp4|woff|woff2|ttf|eot|tif|tiff Next, probe HTTP requests to th...