ChopChop

ChopChop ChopChop 은 웹 애플리케이션에 대한 동적 애플리케이션 보안 테스트Dynamic Application Security Testing를 위한 명령줄 도구로, 처음에는 Michelin CERT가 작성했습니다. 목표는 여러 엔드포인트를 스캔하여 웹루트를 통해 노출된 서비스/파일/폴더를 식별하는 것입니다. 검사/시그니처는 설정 파일기본값: chopchop.yml에 선언되며, 완전히 구성 가능하고 특히 개발자에 의해 설정됩니다. "Chop chop"은 광둥어에서 유래한 표현입니다. "Chop chop"은 "서둘러"...

Parth

Parth 휴리스틱 취약 파라미터 스캐너 소개 일부 HTTP 파라미터 이름은 다른 기능보다 특정 기능과 더 흔히 연관됩니다. 예를 들어, ?url= 파라미터는 일반적으로 URL을 값으로 포함하므로 파일 포함, 오픈 리디렉션 및 SSRF 공격에 자주 노출됩니다. Parth는 버프 스위트 히스토리, URL 목록 또는 자체적으로 발견한 URL을 분석하여 이러한 파라미터 이름과 일반적으로 관련된 위험을 찾아냅니다. Parth는 테스트할 구성 요소의 우선순위를 정하는 데 도움을 주어 웹 보안 테스트를 지원하기 위해 설계되었습니다. 사용...

sql-injection

sql-injection python tool that...

web-attack-payloads

Web Attack Payloads Collection !Cybersecurityhttps://img.s...

PT-2026-25586

Summary Prior to Memray 1.19.2, Memray rendered the command line of the tracked process directly into generated HTML reports without escaping. Because there was no escaping, attacker-controlled command line arguments were inserted as raw HTML into the generated report. This allowed JavaScript...

Plasma

Plasma !Pythonhttps://img.shields.io/badge/python-3.10%2B-...

SoK: The Pitfalls of Deep Reinforcement Learning for Cybersecurity

Deep Reinforcement Learning DRL has achieved remarkable success in domains requiring sequential decision-making, motivating its application to cybersecurity problems. However, transitioning DRL from laboratory simulations to bespoke cyber environments can introduce numerous issues. This is furthe...

web-security-vulnerability-labs

web-security-vulnerability-labs This repository documents han...

Exploit for CVE-2015-1427

Penetration Testing Framework !License: MIThttps://img.sh...

pentest-automation-suite

Penetration Testing Automation Tools 🔴 Automated Penetratio...

Janusec-Application-Gateway

It is an offensive tool for web application security testing. The repository contains a tool for testing web application security, specifically for identifying vulnerabilities in web applications. The tool is designed to test for various types of vulnerabilities, including SQL injection, cross-si...

3DSecure 2.0 3DS Authorization Challenge Cross Site Scripting

Product: 3DSecure 2.0 Manufacturer: Redsys Affected Versions: 3DSecure 2.0 3DS Authorization Challenge Tested Versions: 3DSecure 2.0 3DS Authorization Challenge Vulnerability Type: Cross-Site Scripting XSS Risk Level: Medium Solution Status: Not yet fixed Manufacturer Notification: 2024-01-17...

3DSecure 2.0 3DS Method Authentication Cross Site Scripting

Product: 3DSecure 2.0 Manufacturer: Redsys Affected Versions: 3DSecure 2.0 3DS Method Authentication Tested Versions: 3DSecure 2.0 3DS Method Authentication Vulnerability Type: Cross-Site Scripting XSS Risk Level: Medium Solution Status: Not yet fixed Manufacturer Notification: 2024-01-17 Solutio...

vulhub

This is a collection of vulnerable web applications and tools for testing and learning about web application security. The repository contains a variety of applications, including CouchDB, FFmpeg, Git, and Jenkins, each with its own set of vulnerabilities. The applications are designed to be used...

vulhub

This is an open-source collection of pre-built vulnerable docker environments. It is an offensive tool for web application security testing. The primary vulnerability is not specified, but the repository contains various vulnerable environments, including ones for CouchDB, FFmpeg, Git, InfluxDB,...

Unspecified Vulnerability in HCL AppScan

HCL AppScan is a suite of dynamic analysis testing tools from HCL India. The tool is mainly used for web security testing. A security vulnerability exists in HCL AppScan Enterprise, which stems from the lack of HTTP Strict-Transport-Security header in the Management section of the Enterprise...

Unspecified Vulnerability in HCL AppScan (CNVD-2021-13713)

HCL AppScan is a suite of dynamic analysis testing tools from HCL India. The tool is mainly used for web security testing. A security vulnerability exists in HCL AppScan Enterprise that stems from the use of broken or risky encryption algorithms to store REST API user details. No detailed...

vulhub

It is an offensive tool for web application security training. The repository contains a collection of pre-built vulnerable docker environments, allowing users to practice web application security testing without requiring prior knowledge of docker. The tool is designed to be easy to use, with a...

HCL AppScan Cross-Site Scripting Vulnerability

HCL AppScan is a suite of dynamic analysis testing tools from HCL India, which is primarily used for web security testing. A cross-site scripting vulnerability exists in HCL AppScan Enterprise Edition version 10.0.0 and earlier. The vulnerability stems from the lack of proper validation of...

Unspecified Vulnerability in HCL AppScan Enterprise advisory API

HCL AppScan Enterprise is a suite of dynamic analysis and testing tools from HCL India, which is primarily used for web security testing. A security vulnerability exists in the Advisory API documentation in HCL AppScan Enterprise 10.0.0 and earlier versions. The vulnerability can be exploited by ...