bunkerweb

🌐 Website | 🤝 Panel | 📓 Documentation | 👨‍💻 Demo | 📱 Demo UI | 🧩 Templates | 🛡️ Examples 💬 Chat | 📝 Forum | 📝 Community | 🗺️ Threatmap | 📊 Status | 🔎 Feedback 🛡️ Make security by default great again! Bunk...

log4shellwithlog4j2_13_3

log4shellwithlog4j2133 Springboot web application accepts a name get parameter and logs its value to log4j2. Vulnerable to CVE-2021-44228. build the Springboot vulnerable application with mvn clean install run the Springboot application with the k2 agent with java --add-modules java.sql...

log4j-scanner

log4j-scanner A Log4j vulnerability scanner is automated scanner to find log4j CVE-2021-44228 and CVE202145046 vulnerabilities in web applications. Features 1- It supports multiple URL to perform scan 2- It has payload that can bypass some WAF 3- It supports GET and POST request 4- It supports us...

ModSecurity

Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. In general, it provides the capability to load/interpret rules written in the ModSecurity...

CVE-2021-45416

Docker RosarioSIS Installation Minimum requirements: Docker & Git working. You can pull the image from DockerHub or: 1. docker on $ git clone https://github.com/dnr6419/CVE-2021-45416.git $ cd CVE-2021-45416 $ docker-compose up -d 2. Visit the URL and Install the Database...

Taipan

Taipan is now a sponsored project. The Community sponsor will receive access to the laset version of Taipan Community Edition. The free version is release after three months from the release date. To know more visit: https://github.com/enkomio-sponsor/info or https://taipansec.com. Latest Communi...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

scenester

Scenester Scenester - a tool to visually snapshot a website by supplying multiple user-agent. Designed to aid in discovery of different entry points into an application. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Sharique Shaikh, sharique dot shaikh at nccgro...

CVE-2024-7124

CVE-2024-7124 Reflected XSS in DInGO dLibra from 6.0 = 6.3.20 Improper Neutralization of Input During Web Page Generation vulnerability in DInGO dLibra software in the parameter 'filter' in the endpoint 'indexsearch' allows a Reflected Cross-Site Scripting XSS. An attacker might trick somebody in...

SecurityShepherd

OWASP Security Shepherd The OWASP Security Shepherd Project is a web and mobile application security training platform. Security Shepherd has been designed to foster and improve security awareness among a varied skill-set demographic. The aim of this project is to take AppSec novices or experienc...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...

wafw00f

WAFW00F The Web Application Firewall Fingerprinting Tool. — FromEnable Security -blue.svg How does it work? To do its magic, WAFW00F does the following: Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions. If that is not successful, it sends a number o...

Pegasus-Pentest-Arsenal

Pegasus Pentest Arsenal PPA /\ / | / \ | \ | || | | | | / | /| |/ |/ |/ ,/; ; ; ,'/|; ,/,/, ,'/ |;/,/,/,/| ,/; |;|/,/,/,/,/| ,/'; |;|,/,/,/,/,/| ,/'; |;|/,/,/,/,/,/|, / ; |;|,/,/,/,/,/,/| / ,'; |;|/,/,/,/,/,/,/| /,/'; |;|,/,/,/,/,/,/,/| /;/ '; |;|/,/,/,/,/,/,/,/| ██████╗ ███████╗ ██████╗ █████╗...

hackguard

hackguard FAST WEB APPLICATION VULNERABILITY SCANNER Requirements: 1. Make sure python3 is installed in windows Or in Linux 2. For Windows: python -m pip install -r requirements.txt 3. For Linux: python3 -m pip install -r requirements.txt Installation: 1. For Linux Users: a git clone...

wfuzz

Wfuzz - The Web Fuzzer Wfuzz has been created to facilitate the task in web applications assessments and it is based on a simple concept: it replaces any reference to the FUZZ keyword by the value of a given payload. A payload in Wfuzz is a source of data. This simple concept allows any input to ...

CVE-2023-40355

🚨 CVE-2023-40355 Checker Welcome to the CVE-2023-40355 Checker! This Python script is designed to test for the CVE-2023-40355 vulnerability in web applications. 📋 Description Cross Site Scripting XSS vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0...

coraza

Coraza - Web Application Firewall Coraza is an open source, enterprise-grade, high performance Web Application Firewall WAF ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set v4. Website:...

CVE-2023-49978

CVE-2023-49978 Customer Support System 1.0 - Incorrect Access Control Description : Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators. Vulnerable Product Version : Customer Support...

ravage

Ravage Ravage is an evidence-first CLI for assessing a running web application that you own or are explicitly authorized to test. It combines deterministic reconnaissance and validation with an optional model-driven attack loop, while keeping scope, authentication, traffic accounting, and evidenc...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...