pentest-ai

pentest-ai It doesn't flag. It proves. Website · Install · Why verification · Benchmarks · Limits · Discord ⚠️ Offensive tooling, authorized testing only. By installing you accept the AUP and Terms. See Responsible use ↓ Two minutes, no API key, no target of your own root@kitploit: pip install pta...

uafuzz

UAFuzz: Gerichtetes Fuzzing auf Binärebene für Use-After-Free-Schwachstellen Gerichtetes Greybox-Fuzzing DGF wie AFLGo zielt darauf ab, Stresstests an vorausgewählten potenziell verwundbaren Zielstellen durchzuführen, mit Anwendungen in verschiedenen Sicherheitskontexten: 1 Bug-Reproduktion, 2...

sslscan

sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...

trivy-action

Trivy Action GitHub Action per Trivy !GitHub Releaserelease-imgrelease !GitHub Marketplacemarketplace-imgmarketplace !Licenselicense-imglicense Indice Utilizzo Scansione della pipeline CI Scansione della pipeline CI con configurazione Trivy Cache Configurazione di Trivy Scansione di un tarball Us...

trivy-action

Trivy Action GitHub Action for Trivy Table of Contents Usage Scan CI Pipeline Scan CI Pipeline w/ Trivy Config Cache Trivy Setup Scanning a Tarball Using Trivy with templates Using Trivy with GitHub Code Scanning...

dockerscan

DockerScan v2.0 The Most Comprehensive Docker Security Scanner | |...

Galaxy-Bugbounty-Checklist

Note Prova a creare la migliore checklist per Bug Bounty. Tutte le checklist includono riferimenti. Sentiti libero di contattarmi a maximus0xday at gmail se hai domande. Lista delle cose da fare: Account Takeover CSRF Bypass Http Request Smuggling OSINT OAuth...

linWinPwn

linWinPwn - Canivete Suíço para Testes de Penetração no Active Directory usando Linux Descrição linWinPwn é um script bash que encapsula várias ferramentas do Active Directory para enumeração LDAP, RPC, ADCS, MSSQL, Kerberos, SCCM, verificações de vulnerabilidade noPac, ZeroLogon, MS17-010,...

nerve

Network Exploitation, Reconnaissance & Vulnerability Engine N.E.R.V.E Inhaltsverzeichnis Kontinuierliche Sicherheit Über NERVE Was ist NERVE Funktionen Voraussetzungen Installation Bereitstellungsempfehlungen Installation - Docker Installation - Bare Metal Installation - Multi-Node Upgrade...

jackhammer

Jackhammer: Uno strumento di valutazione/gestione delle vulnerabilità di sicurezza per risolvere tutti i problemi del team di sicurezza. Cos'è Jackhammer? Jackhammer è uno strumento di collaborazione creato con l'obiettivo di colmare il divario tra il team di sicurezza e il team di sviluppo, il...

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

exploit_mitigations

Exploitation Mitigations The goal is to list exploitation mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place. An example is the...

vulscan

vulscan - Vulnerability Scanning with Nmap Introduction Vulscan is a module which enhances nmap to a vulnerability scanner. The nmap option -sV enables version detection per service which is used to determine potential flaws according to the identified product. The data is looked up in an offline...

vulscan

vulscan - Scansione delle vulnerabilità con Nmap Introduzione Vulscan è un modulo che potenzia nmap trasformandolo in uno scanner di vulnerabilità. L'opzione -sV di nmap abilita il rilevamento della versione per servizio, utilizzato per determinare potenziali falle in base al prodotto identificat...

BlackStone

Meine Website: https://microjoan.com Mein Blog: https://darkhacking.es/ Video zur Nutzung und Installation: https://youtu.be/qasPlaaYxiU Kauf mir einen Kaffee: https://www.buymeacoffee.com/microjoan BlackStone Project 2.0 Für Kali Linux Das BlackStone-Projekt oder "BlackStone Project" ist ein Too...

recox

Recox v2.0 RecoX هي أداة متعددة الاستخدامات وقوية بشكل لا يصدق، مصممة خصيصًا للمساعدة في تحديد وتصنيف الثغرات الأمنية في تطبيقات الويب. النص البرمجي قادر على اكتشاف ثغرات لا تُدرج عادةً في قائمة OWASP العشر الأوائل للثغرات، مما يجعله إضافة قيّمة لأي مجموعة أدوات لمتخصص أمني. من بين نقاط القوة...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

VulnLab

VulnLab Ein Web-Schwachstellenlabor-Projekt, entwickelt von Yavuzlar. Logo Schwachstellen SQL-Injection Cross-Site-Scripting XSS Befehlseinschleusung Unsichere direkte Objektreferenzen IDOR Cross-Site-Request-Forgery CSRF XML-External-Entity XXE Unsichere Deserialisierung Dateiupload...

htcap

HTCAP htcap è uno scanner per applicazioni web in grado di effettuare il crawling ricorsivo di applicazioni a pagina singola SPA intercettando chiamate ajax e modifiche del DOM. CARATTERISTICHE PRINCIPALI Motore di crawling ricorsivo del DOM Scopre richieste ajax/fetch/jsonp/websocket Supporta...

htcap

HTCAP htcap is a web application scanner able to crawl single page application SPA recursively by intercepting ajax calls and DOM changes. KEY FEATURES Recursive DOM crawling engine Discovers ajax/fetch/jsonp/websocket requests Supports cookies, proxy, custom headers, http auth and more Heuristic...