17430 matches found
caido
Sitio web • Panel de control • Documentación • Hoja de ruta • Marca • Discord 👋 Bienvenido ¡Bienvenido a Caido! Caido tiene como objetivo ayudar a profesionales y entusiastas de la seguridad a auditar aplicaciones web con eficiencia y facilidad. Aquí puedes participar en el desarrollo de nuestro...
h2t
h2t - Herramienta de Endurecimiento HTTP Descripción h2t es una herramienta simple para ayudar a los administradores de sistemas a endurecer sus sitios web. Hasta ahora h2t verifica las cabeceras del sitio web y recomienda cómo mejorarlas. Dependencias Python 3 colorama requests Instalación $ git...
skipfish
=========================================== skipfish - escáner de seguridad de aplicaciones web http://code.google.com/p/skipfish/ Escrito y mantenido por: Michal Zalewski [email protected] Niels Heinen [email protected] Sebastian Roschke [email protected] Copyright 2009 - 2012...
Parth
Parth Scanner euristico di parametri vulnerabili Introduzione Alcuni nomi di parametri HTTP sono più comunemente associati a una funzionalità rispetto ad altri. Ad esempio, il parametro ?url= di solito contiene URL come valore e quindi spesso cade vittima di attacchi di file inclusion, open...
NodeGoat
NodeGoat Essendo leggero, veloce e scalabile, Node.js sta diventando una piattaforma ampiamente adottata per lo sviluppo di applicazioni web. Questo progetto fornisce un ambiente per apprendere come i rischi di sicurezza OWASP Top 10 si applicano alle applicazioni web sviluppate con Node.js e com...
webhacklist
The complete archive of the Top 10 Web Hacking Techniques — every nominated technique not just the winners for every year since 2006, plus PDF snapshots of the original announcement posts so the record survives its hosts. 🌐 Read it online at webhacklist.com Search every technique, filter by year,...
SecurityExplained
Security Explained SecurityExplained is a new series after the previous learning challenge series Learn365. The aim of SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning. Below are the various...
parameth
parameth This tool can be used to brute discover GET and POST parameters Often when you are busting a directory for common files, you can identify scripts for example test.php that look like they need to be passed an unknown parameter. This hopefully can help find them. example scan The -off flag...
CHIYU TCP/IP Converter - Cross-Site Scripting
CHIYU BF-430, BF-431 and BF-450M TCP/IP Converter devices contain a cross-site scripting vulnerability due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, and ppp.cgi. id: CVE-2021-31250 info: name: CHIYU TCP/IP Converter - Cross-Site Scripting author: geeknik...
wwwgrep
WWWGrep OWASP Foundation Web Respository Author: Mark Deen & Aditi Mohan Introduction WWWGrep is a rapid search “grepping” mechanism that examines HTML elements by type and permits focused single, multiple file based URLs and recursive with respect to root domain or not searches to be performed...
osed-scripts
osed-scripts bespoke tooling for offensive security's Windows Usermode Exploit Dev course OSED Table of Contents Standalone Scripts egghunter.py find-gadgets.py shellcoder.py install-mona.sh attach-process.ps1 WinDbg Scripts find-ppr.py find-bad-chars.py search.py Standalone Scripts Installation:...
TarantuBench
TarantuBench v1 A benchmark for evaluating AI agents on web security challenges, generated by the TarantuLabs engine. What is this? TarantuBench is a collection of 100 vulnerable web applications, each containing a hidden flag TARANTU.... An agent's job is to find and extract the flag by...
quarantyne
=== ESTE PROYECTO ESTÁ ARCHIVADO === Quarantyne · Firewall web moderno 🛃 Seguridad web automatizada simplificada TL;DR Quarantyne es un proxy inverso que protege aplicaciones web y APIs de comportamientos fraudulentos, mal uso, bots y ciberataques en tiempo real. Requisitos Presentación...
blind-sql-bitshifting
Blind SQL Injection via Bitshifting This is a module that performs blind SQL injection by using the bitshifting method to calculate characters instead of guessing them. It requires 7/8 requests per character, depending on the configuration. Usage import blind-sql-bitshifting as x Edit this...
golismero
¿Qué es GoLismero? GoLismero es un marco de código abierto para pruebas de seguridad. Actualmente está orientado a la seguridad web, pero puede ampliarse fácilmente a otros tipos de escaneos. Las características más interesantes del marco son: Independencia real de plataforma. Probado en Windows,...
tbhm
The Bug Hunter's Methodology TBHM Welcome! This repo is a collection of tips tricks tools data analysis and notes related to web application security assessments and more specifically towards bug hunting in bug bounties. The current sections are divided as follows: Before You Get Hacking Learning...
Astra Linux – Vulnerability in Firefox and Thunderbird
A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have led to XSS attacks on websites that insecurely serve files without a content-type header. This vulnerabilit...
web-security-labs
🌐 Sasidhar C — Web Security Labs Hands-on web security labs a...