8536 matches found
automatic-api-attack-tool
čŖåØ API ę»å»å·„å · Imperva ēåÆå®å¶ API ę»å»å·„å ·å° API č§čä½äøŗč¾å „ļ¼å¹¶åŗäŗčÆ„č§čēę并čæč”ę»å»ä½äøŗč¾åŗć čÆ„å·„å ·č½å¤č§£ę API č§čļ¼å¹¶ę ¹ę® API č§čäøå®ä¹ēå 容åå»ŗęØ”ē³ęµčÆę»å»åŗęÆćęÆäøŖē«Æē¹é½ä¼č¢«ę³Øå „ę ¹ę®č§čč¾¹ēå ēęēå·§å¦å¼ļ¼ä»„åč¾¹ēä¹å¤ēå¼ļ¼ē¶ååéēøåŗēčÆ·ę±ļ¼å¹¶čƦē»ę„åå ¶ęåęå¤±č“„ćęØčæåÆ仄ę©å±å®ä»„čæč”åē§å®å Øę»å»åéļ¼ä¾å¦éę³čµęŗč®æé®ćXSSćSQLi å RFIļ¼čæäŗę»å»éåƹē°ęē«Æē¹ļ¼ēč³äøååØēē«Æē¹ć ę éäŗŗå·„å¹²é¢ćåŖéčæč”å·„å ·å³åÆč·åē»ęć čÆ„å·„å ·åÆä»„č½»ę¾ę©å±ä»„ę»”č¶³åē§éę±ļ¼ä¾å¦éåƹę³č¦ęµčÆå ¶ API ēå¼åč ļ¼ęåøęåÆ¹å ¶å ¬å ± API...
peniot
PENIOT: Penetration Testing Tool for IoT Table of Contents Project Description What is PENIOT? Why is PENIOT required? What does PENIOT provide? Build Instructions Documentation Testing Contributors Developer's Note Project Poster Project Description What is PENIOT? PENIOT is a penetration testin...
peniot
PENIOT: ē©čē½ęøéęµčÆå·„å · ē®å½ 锹ē®ęčæ° ä»ä¹ęÆPENIOTļ¼ äøŗä»ä¹éč¦PENIOTļ¼ PENIOTęä¾äŗä»ä¹ļ¼ ęå»ŗčÆ“ę ęę”£ ęµčÆ č“”ē®č å¼åč čÆ“ę 锹ē®ęµ·ę„ 锹ē®ęčæ° ä»ä¹ęÆPENIOTļ¼ PENIOT ęÆäøäøŖéåƹē©čē½ļ¼IoTļ¼č®¾å¤ēęøéęµčÆå·„å ·ć å®éčæéåÆ¹č®¾å¤ēäŗčē½čæę„åčµ·äøåē±»åēå®å Øę»å»ļ¼åø®å©ęØęµčÆ/ęøéč®¾å¤ć ę¢å„čÆčÆ“ļ¼ęØåÆä»„č®©č®¾å¤ę“é²åØäø»åØåč¢«åØå®å Øę»å»ä¹äøćåØē”®å®ē®ę č®¾å¤åå ¶åæ č¦äæ”ęÆļ¼ęåę°ļ¼åļ¼ ęØåÆ仄ę§č”äø»åØå®å Øę»å»ļ¼ä¾å¦ēÆ”ę¹/ę¶čē³»ē»čµęŗćéę¾ęęēéäæ”åå ēć åę¶ļ¼ęØčæåÆ仄ę§č”č¢«åØå®å Øę»å»ļ¼ä¾å¦ē “åéč¦äæ”ęÆēęŗåÆę§ęčæč”ęµéåęć...
snuck
snuck čŖåØ XSS čæ껤åØē»čæ ę¦čæ° snuck ęÆäøäøŖčŖåØåå·„å ·ļ¼å ¶ē®ę ęÆéčæåŗäŗåå°äøäøęäøéØåę³Øå „ę„ę¾čęµčÆē»å®ē XSS čæ껤åØćčÆ„ę¹ę³éēØ Selenium 驱åØ Web ęµč§åØļ¼ä»„éē°ę»å»č åå害č ēč”äøŗć äŗč§£ snuck č®æé® ęēØ ä»„č·åęå ³čÆ„å·„å ·åēØę·ęåēę“å¤äæ”ęÆć ē ē©¶č®ŗę snuck ēę¹ę³č®ŗćčÆä¼°åå®ē°åØęęÆę„åäøęčæ°ļ¼ Fabrizio d'Amore, Mauro Gentile: Automatic and Context-Aware Cross-Site Scripting Filter Evasion. Department of...
DonPwner
š„ DonPwner - Advanced DonPAPI Analysis & Attack Tool Advanced Password Spray & Credential Analysis Tool - Leveraging DonPAPI with Smart Delay & Jitter Features ā¢ Installation ā¢ Usage ā¢ Examples ā¢ Configuration ā¢ License šÆ About DonPwner is an advanced penetration testing tool that revolutionizes...
toxssin
toxssin ēØé toxssin ęÆäøę¬¾å¼ęŗęøéęµčÆå·„å ·ļ¼ēØäŗčŖåØåå©ēØč·Øē«čę¬ļ¼XSSļ¼ę¼ę“ēčæēØćå®å å«äøäøŖ HTTPS ęå”åØļ¼čÆ„ęå”åØä½äøŗę¶ę JavaScript č½½č·ļ¼toxin.jsļ¼ęäŗ§ēęµéēč§£éåØć čƄ锹ē®ęåļ¼ē°åØä»ē¶ęÆļ¼äø锹åŗäŗē ē©¶ēåęå°čÆļ¼ęØåØę¢ē“¢ XSS ę¼ę“åÆč½åø¦ę„ēå©ēØę·±åŗ¦ļ¼ä» ä½æēØåē JavaScriptćåäæ”ä»»ēčÆ书åäøäŗå»ä»·ęå·§ć å č“£å£°ę ļ¼åØęŖē»ęē”®č®øåÆēę åµäøļ¼ä½æēØę¬å·„å ·éåƹ Web åŗēØčæč”ęµčÆęÆčæę³ēćęØåŗåƹä½æēØę¬å·„å ·åÆč½å¼čµ·ēä»»ä½éŗ»ē¦č“č“£ć č§é¢ę¼ē¤ŗ https://www.youtube.com/watch?v=Z9I4UJUBr...
toxssin
toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...
openvas-scanner
OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...
dorothy
ē± David Frenchļ¼@threatpunterļ¼åØ Elastic Security åå»ŗ Dorothy ęÆäøę¬¾åø®å©å®å Øå¢éęµčÆå ¶ Okta ēÆå¢ēę§åę£ęµč½åēå·„å ·ćDorothy ęä¾äŗå¤äøŖęØ”åļ¼ēØäŗęØ”ęę»å»č åØ Okta ēÆå¢äøåÆč½éåēęä½ļ¼ä»„åå®å Øå¢éåŗå½č½å¤å®”č®”ēęä½ćčæäŗęØ”åę å°å°ēøå ³ē MITRE ATT&CKĀ® ęęÆļ¼ä¾å¦ęä¹ åćé²å¾”č§éæååē°ć éčæčæēÆå客ęē« ęčæäøŖę¼ē¤ŗäŗč§£ę“å¤å ³äŗ Dorothy ēäæ”ęÆ仄åå¦ä½å¼å§ä½æēØå®ć Elastic Security ēå č“¹ Okta ę£ęµč§ååÆ仄åØę们ē detection-rules...
CVE-2021-44228-white-box
Article Journal: https://www.researchgate.net/publication/373214720PengujianKerentananpadaCVE-2021-44228terhadapAncamanRemoteAccessTrojan Thesis: https://1drv.ms/b/s!Al-8jtgY0iBXmz79DKEROaZT5n8a?e=1E6Pkm Log4Shell // n. Log4j Vulnerability Environment Box This repo purposely built for Log4j...
Google-api-key-scanner
ę¦čæ° äøäøŖ Python å·„å ·ļ¼ēØäŗéåƹ 21 äøŖäøåē Google API ē«Æē¹ęµčÆ Google Maps API åÆé„ļ¼ä»„ę£ę„åŖäŗęå”å·²ę“é²äøååØę¼ę“ć !IMPORTANT š„ å¦éå·„å ·ēå®ę“ę¼ē¤ŗļ¼čÆ·č§ēę¤å¤ēę¼ē¤ŗč§é¢ļ¼https://youtu.be/3KMUnLdlOSEćäøę¹å±ē¤ŗēåč½ä» 20:27 å¼å§ć åč½ē¹ę§ ęµčÆåäøŖåÆé„ęä»ę件čÆ»åēåÆé„åč”Ø äøꬔčæč”ę£ę„ 21 äøŖ Google API ē«Æē¹ äøŗęÆäøŖåē°ēę¼ę“ę¾ē¤ŗ PoC ē«Æē¹ URL ęÆęéčæ代ēč·Æē±ęµé å®éęØ”å¼ļ¼ä» ę¾ē¤ŗååØę¼ę“ēē»ę å°ååØę¼ę“ē URL äæåå°č¾åŗę件 Ctrl+C å®å Ø ā...
PentestGPT
PentestGPT AI-Powered Autonomous Penetration Testing Agent Published at USENIX Security 2024 Official Website: pentestgpt.com Ā» Research Paper Ā· Report Bug Ā· Request Feature Demo Installation Watch on YouTube PentestGPT in Action Watch on YouTube What's New in v1.0 Agentic Upgrade Multi-Stage...
DracOS
What is Dracos Linux ? Dracos Linux www.dracos-linux.org is the Linux operating system from Indonesian , open source is built based on the Linux From Scratch under the protection of the GNU General Public License v3.0. This operating system is one variant of Linux distributions, which is used to...
foolav
foolav ä½æēØę¤ä»£ē ē¼čÆēåÆę§č”ę件åØęøéęµčÆäøå¾ęēØļ¼å½éč¦ę§č”ęäŗęęč“č½½ļ¼åÆč½ęÆmeterpreterļ¼ļ¼åę¶ē”®äæäøä¼č¢«é²ē ęÆč½Æ件ę£ęµå°ę¶ćåÆäøēč¦ę±ęÆč½å¤å°äø¤äøŖę件äøä¼ å°åäøē®å½ļ¼äŗčæå¶åÆę§č”ę件 å ęęč“č½½ę件ć ä½æēØę„éŖ¤ 1. åå¤ä½ ēęęč“č½½ļ¼x86ļ¼ļ¼ä¾å¦ļ¼ č®”ē®åØļ¼ msfvenom -p windows/exec CMD=calc.exe EXITFUNC=thread -e x86/shikataganai -b "\x00\x0a\x0d\xff" -f c 2/dev/null | egrep "^"" | tr -d ""\n;" foolav.mf...
fronthunter
FrontHunter FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting. Domain Fronting? Really? I know, I knowā¦ domain fronting is pretty old. But the truth is, itās still useful as just another feature to include in your C2 infrastructure. When it comes ...
prowler
Prowler Prowler ęÆäøäøŖéØē½²åØę čę“¾éē¾¤äøēē½ē»ę¼ę“ę«ęåØļ¼ęååØę°å å”äæ”ęÆå®å Øē¤¾åŗé»å®¢é©¬ęę¾ HackSmith v1.0 ęé“å¼åć åč½ ę«ęē½ē»ļ¼ē¹å®åē½ę IP å°ååč”Øļ¼ļ¼ę¾åŗęęę“»č·ē½ē»č®¾å¤å ³čē IP å°å éčæęēŗ¹čÆå«ē”®å®č®¾å¤ē±»å ę£ęµč®¾å¤äøęÆå¦ååØå¼ę¾ē«Æå£ å°ē«Æå£äøåøøč§ęå”å ³ččµ·ę„ ä½æēØåŗåé»č®¤ååøøč§åę®åå øęµčÆč®¾å¤ éčæä»Ŗč”ØēåēØę·éē„å®å Øę¼ę“ćä»Ŗč”ØēåÆ¼č§ č®”åäøēåč½ ę“å¤ē§ē±»ēę¼ę“čÆä¼°č½åļ¼web åŗēØēļ¼ ę ¹ę®ęēŗ¹éę©åčÆåč”Ø ē”¬ä»¶ ę čę“¾ Cluster HATļ¼å« 4 äøŖ Pi Zero Wļ¼ ę čę“¾ 3 ē½ē»č®¾å¤ č½Æ件ę Raspbian...
drift-node-sdk
The Node.js Tusk Drift SDK enables fast and deterministic API testing by capturing and replaying API calls made to/from your service. Automatically record real-world API calls, then replay them as tests using the Tusk CLI to find regressions. During replay, all outbound requests are intercepted...
EvilMist
EvilMist EvilMist is a collection of scripts and utilities designed to support cloud security configuration audit, cloud penetration testing & cloud red teaming. The toolkit helps identify misconfigurations, assess privilege-escalation paths, and simulate attack techniques. EvilMist aims to...
RSPET
RSPET RSPET Reverse Shell and Post Exploitation Tool is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario. DISCLAIMER: This software is provided for educational and PenTesting purposes and as a proof of concept. The developers do not endorse,...
weevely3
Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...