8536 matches found
automatic-api-attack-tool
čŖåØ API ę»å»å·„å · Imperva ēåÆå®å¶ API ę»å»å·„å ·å° API č§čä½äøŗč¾å „ļ¼å¹¶åŗäŗčÆ„č§čēęå¹¶čæč”ę»å»ä½äøŗč¾åŗć čÆ„å·„å ·č½å¤č§£ę API č§čļ¼å¹¶ę ¹ę® API č§čäøå®ä¹ēå 容å建樔ē³ęµčÆę»å»åŗęÆćęÆäøŖē«Æē¹é½ä¼č¢«ę³Øå „ę ¹ę®č§čč¾¹ēå ēęēå·§å¦å¼ļ¼ä»„åč¾¹ēä¹å¤ēå¼ļ¼ē¶ååéēøåŗē请ę±ļ¼å¹¶čƦē»ę„åå ¶ęåę失蓄ćęØčæåÆä»„ę©å±å®ä»„čæč”åē§å®å Øę»å»åéļ¼ä¾å¦éę³čµęŗč®æé®ćXSSćSQLi å RFIļ¼čæäŗę»å»é对ē°ę端ē¹ļ¼ēč³äøååØē端ē¹ć ę éäŗŗå·„å¹²é¢ćåŖéčæč”å·„å ·å³åÆč·åē»ęć čÆ„å·„å ·åÆä»„č½»ę¾ę©å±ä»„滔足åē§éę±ļ¼ä¾å¦é对ę³č¦ęµčÆå ¶ API ēå¼åč ļ¼ęåøęåÆ¹å ¶å ¬å ± API...
peniot
PENIOT: Penetration Testing Tool for IoT Table of Contents Project Description What is PENIOT? Why is PENIOT required? What does PENIOT provide? Build Instructions Documentation Testing Contributors Developer's Note Project Poster Project Description What is PENIOT? PENIOT is a penetration testin...
peniot
PENIOT: ē©čē½ęøéęµčÆå·„å · ē®å½ 锹ē®ęčæ° ä»ä¹ęÆPENIOTļ¼ äøŗä»ä¹éč¦PENIOTļ¼ PENIOTęä¾äŗä»ä¹ļ¼ ę建诓ę ę攣 ęµčÆ č“”ē®č å¼åč 诓ę 锹ē®ęµ·ę„ 锹ē®ęčæ° ä»ä¹ęÆPENIOTļ¼ PENIOT ęÆäøäøŖé对ē©čē½ļ¼IoTļ¼č®¾å¤ēęøéęµčÆå·„å ·ć å®éčæé对设å¤ēäŗčē½čæę„åčµ·äøåē±»åēå®å Øę»å»ļ¼åø®å©ęØęµčÆ/ęøé设å¤ć ę¢å„čÆčÆ“ļ¼ęØåÆä»„让设å¤ę“é²åØäø»åØå被åØå®å Øę»å»ä¹äøćåØē”®å®ē®ę 设å¤åå ¶åæ č¦äæ”ęÆļ¼ęåę°ļ¼åļ¼ ęØåÆä»„ę§č”äø»åØå®å Øę»å»ļ¼ä¾å¦ēÆ”ę¹/ę¶čē³»ē»čµęŗćéę¾ęęēéäæ”åå ēć åę¶ļ¼ęØčæåÆä»„ę§č”被åØå®å Øę»å»ļ¼ä¾å¦ē “åéč¦äæ”ęÆēęŗåÆę§ęčæč”ęµéåęć...
snuck
snuck čŖåØ XSS čæę»¤åØē»čæ ę¦čæ° snuck ęÆäøäøŖčŖåØåå·„å ·ļ¼å ¶ē®ę ęÆéčæåŗäŗåå°äøäøęäøéØåę³Øå „ę„ę¾čęµčÆē»å®ē XSS čæę»¤åØć评ę¹ę³éēØ Selenium é©±åØ Web ęµč§åØļ¼ä»„éē°ę»å»č åå害č ēč”äøŗć äŗč§£ snuck č®æé® ęēØ ä»„č·åęå ³čÆ„å·„å ·åēØę·ęåēę“å¤äæ”ęÆć ē 究论ę snuck ēę¹ę³č®ŗćčÆä¼°åå®ē°åØęęÆę„åäøęčæ°ļ¼ Fabrizio d'Amore, Mauro Gentile: Automatic and Context-Aware Cross-Site Scripting Filter Evasion. Department of...
DonPwner
š„ DonPwner - Advanced DonPAPI Analysis & Attack Tool Advanced Password Spray & Credential Analysis Tool - Leveraging DonPAPI with Smart Delay & Jitter Features ⢠Installation ⢠Usage ⢠Examples ⢠Configuration ⢠License šÆ About DonPwner is an advanced penetration testing tool that revolutionizes...
toxssin
toxssin ēØé toxssin ęÆäøę¬¾å¼ęŗęøéęµčÆå·„å ·ļ¼ēØäŗčŖåØåå©ēØč·Øē«čę¬ļ¼XSSļ¼ę¼ę“ēčæēØćå®å å«äøäøŖ HTTPS ęå”åØļ¼čÆ„ęå”åØä½äøŗę¶ę JavaScript č½½č·ļ¼toxin.jsļ¼ęäŗ§ēęµéēč§£éåØć 评锹ē®ęåļ¼ē°åØä»ē¶ęÆļ¼äøé”¹åŗäŗē ē©¶ēåęå°čÆļ¼ęØåØę¢ē“¢ XSS ę¼ę“åÆč½åø¦ę„ēå©ēØę·±åŗ¦ļ¼ä» 使ēØåē JavaScriptćå俔任ēčÆä¹¦åäøäŗå»ä»·ęå·§ć å 蓣声ę ļ¼åØęŖē»ę甮许åÆēę åµäøļ¼ä½æēØę¬å·„å ·é对 Web åŗēØčæč”ęµčÆęÆčæę³ēćęØåŗåÆ¹ä½æēØę¬å·„å ·åÆč½å¼čµ·ēä»»ä½éŗ»ē¦č“č“£ć č§é¢ę¼ē¤ŗ https://www.youtube.com/watch?v=Z9I4UJUBr...
toxssin
toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...
openvas-scanner
OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...
dorothy
ē± David Frenchļ¼@threatpunterļ¼åØ Elastic Security å建 Dorothy ęÆäøę¬¾åø®å©å®å Øå¢éęµčÆå ¶ Okta ēÆå¢ēę§åę£ęµč½åēå·„å ·ćDorothy ęä¾äŗå¤äøŖęØ”åļ¼ēØäŗęØ”ęę»å»č åØ Okta ēÆå¢äøåÆč½éåēęä½ļ¼ä»„åå®å Øå¢éåŗå½č½å¤å®”č®”ēęä½ćčæäŗęØ”åę å°å°ēøå ³ē MITRE ATT&CKĀ® ęęÆļ¼ä¾å¦ęä¹ åćé²å¾”č§éæååē°ć éčæčæēÆå客ęē« ęčæäøŖę¼ē¤ŗäŗč§£ę“å¤å ³äŗ Dorothy ēäæ”ęÆä»„åå¦ä½å¼å§ä½æēØå®ć Elastic Security ēå 蓹 Okta ę£ęµč§ååÆä»„åØę们ē detection-rules...
CVE-2021-44228-white-box
Article Journal: https://www.researchgate.net/publication/373214720PengujianKerentananpadaCVE-2021-44228terhadapAncamanRemoteAccessTrojan Thesis: https://1drv.ms/b/s!Al-8jtgY0iBXmz79DKEROaZT5n8a?e=1E6Pkm Log4Shell // n. Log4j Vulnerability Environment Box This repo purposely built for Log4j...
Google-api-key-scanner
ę¦čæ° äøäøŖ Python å·„å ·ļ¼ēØäŗé对 21 äøŖäøåē Google API 端ē¹ęµčÆ Google Maps API åÆé„ļ¼ä»„ę£ę„åŖäŗęå”å·²ę“é²äøååØę¼ę“ć !IMPORTANT š„ å¦éå·„å ·ēå®ę“ę¼ē¤ŗļ¼čÆ·č§ēę¤å¤ēę¼ē¤ŗč§é¢ļ¼https://youtu.be/3KMUnLdlOSEćäøę¹å±ē¤ŗēåč½ä» 20:27 å¼å§ć åč½ē¹ę§ ęµčÆåäøŖåÆé„ęä»ę件读åēåÆé„å蔨 äøę¬”čæč”ę£ę„ 21 äøŖ Google API ē«Æē¹ äøŗęÆäøŖåē°ēę¼ę“ę¾ē¤ŗ PoC ē«Æē¹ URL ęÆęéčæä»£ēč·Æē±ęµé å®é樔å¼ļ¼ä» ę¾ē¤ŗååØę¼ę“ēē»ę å°ååØę¼ę“ē URL äæåå°č¾åŗęä»¶ Ctrl+C å®å Ø ā...
PentestGPT
PentestGPT AI-Powered Autonomous Penetration Testing Agent Published at USENIX Security 2024 Official Website: pentestgpt.com Ā» Research Paper Ā· Report Bug Ā· Request Feature Demo Installation Watch on YouTube PentestGPT in Action Watch on YouTube What's New in v1.0 Agentic Upgrade Multi-Stage...
DracOS
What is Dracos Linux ? Dracos Linux www.dracos-linux.org is the Linux operating system from Indonesian , open source is built based on the Linux From Scratch under the protection of the GNU General Public License v3.0. This operating system is one variant of Linux distributions, which is used to...
foolav
foolav 使ēØę¤ä»£ē ē¼čÆēåÆę§č”ęä»¶åØęøéęµčÆäøå¾ęēØļ¼å½éč¦ę§č”ęäŗęęč“č½½ļ¼åÆč½ęÆmeterpreterļ¼ļ¼åę¶ē”®äæäøä¼č¢«é²ē ęÆč½Æä»¶ę£ęµå°ę¶ćåÆäøēč¦ę±ęÆč½å¤å°äø¤äøŖęä»¶äøä¼ å°åäøē®å½ļ¼äŗčæå¶åÆę§č”ęä»¶ å ęęč“č½½ęä»¶ć 使ēØę„éŖ¤ 1. åå¤ä½ ēęęč“č½½ļ¼x86ļ¼ļ¼ä¾å¦ļ¼ č®”ē®åØļ¼ msfvenom -p windows/exec CMD=calc.exe EXITFUNC=thread -e x86/shikataganai -b "\x00\x0a\x0d\xff" -f c 2/dev/null | egrep "^"" | tr -d ""\n;" foolav.mf...
fronthunter
FrontHunter FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting. Domain Fronting? Really? I know, I know⦠domain fronting is pretty old. But the truth is, itās still useful as just another feature to include in your C2 infrastructure. When it comes ...
prowler
Prowler Prowler ęÆäøäøŖéØē½²åØę č擾é群äøēē½ē»ę¼ę“ę«ęåØļ¼ęååØę°å å”äæ”ęÆå®å Øē¤¾åŗé»å®¢é©¬ęę¾ HackSmith v1.0 ęé“å¼åć åč½ ę«ęē½ē»ļ¼ē¹å®åē½ę IP å°åå蔨ļ¼ļ¼ę¾åŗęęę“»č·ē½ē»č®¾å¤å ³čē IP å°å éčæęēŗ¹čÆå«ē”®å®č®¾å¤ē±»å ę£ęµč®¾å¤äøęÆå¦ååØå¼ę¾ē«Æå£ å°ē«Æå£äøåøøč§ęå”å ³ččµ·ę„ ä½æēØåŗåé»č®¤ååøøč§åę®åå øęµčÆč®¾å¤ éčæä»Ŗč”ØēåēØę·éē„å®å Øę¼ę“ć仪蔨ēåÆ¼č§ č®”åäøēåč½ ę“å¤ē§ē±»ēę¼ę“čÆä¼°č½åļ¼web åŗēØēļ¼ ę ¹ę®ęēŗ¹éę©åčÆå蔨 甬件 ę č擾 Cluster HATļ¼å« 4 äøŖ Pi Zero Wļ¼ ę č擾 3 ē½ē»č®¾å¤ 软件ę Raspbian...
drift-node-sdk
The Node.js Tusk Drift SDK enables fast and deterministic API testing by capturing and replaying API calls made to/from your service. Automatically record real-world API calls, then replay them as tests using the Tusk CLI to find regressions. During replay, all outbound requests are intercepted...
EvilMist
EvilMist EvilMist is a collection of scripts and utilities designed to support cloud security configuration audit, cloud penetration testing & cloud red teaming. The toolkit helps identify misconfigurations, assess privilege-escalation paths, and simulate attack techniques. EvilMist aims to...
RSPET
RSPET RSPET Reverse Shell and Post Exploitation Tool is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario. DISCLAIMER: This software is provided for educational and PenTesting purposes and as a proof of concept. The developers do not endorse,...
weevely3
Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...