sslscan

sslscan2 sslscan 版本 2 现已发布。这包括对后端扫描代码的重大重写，这意味着许多检查不再依赖于 OpenSSL 的版本。这使得无论系统编译时使用的 OpenSSL 版本如何，都可以支持旧协议（SSLv2 和 SSLv3）以及 TLSv1.3。 这主要归功于 jtesta 的工作，他负责了大部分后端重写。 其他关键变化包括： 枚举服务器密钥交换组。 枚举服务器签名算法。 支持扫描 SSLv2 和 SSLv3 协议，但不扫描单个加密套件。 包含使用 Docker 的测试套件，以验证 sslscan 功能正确。 移除了 --http 选项，因为它已损坏且最初使用率很低。...

WAES - Auto Enums Websites And Dumps Files As Result

Doing HTB or other CTFs enumeration against targets with HTTPS can become trivial. It can get tiresome to always run the same script/tests on every box eg. nmap, nikto, dirb and so on. A one-click on target with automatic reports coming solves the issue. Furthermore, with a script the enum proces...

Fast and More Efficient Stateless SYN Scanner And Banner Grabber: PolarBearScan

polarbearscan is an attempt to do faster and more efficient banner grabbing and port scanning. It combines two different ideas which hopefully will make it somewhat worthy of your attention and time. The first of these ideas is to use stateless SYN scanning using cryptographically protected cooki...

[Http-enum] Automated HTTP Enumeration Tool

Null Security Team writing a python script for Automated HTTP Enumeration. currently only in the initial beta stage, but includes basic checking of files including the Apache server-status as well as well IIS WebDAV and Microsoft FrontPage Extensions, many more features will be added to this tool...