Continuous Secure Delivery – Out of the Box secureCodeBox is a docker based, modularized toolchain for continuous security scans of your software project. Its goal is to orchestrate and easily automate a bunch of security-testing...
There was a time when we could only imagine machines endeavoring to mimic the human cognitive process. Since then, technology has come a long, long way, and we have all known and have heard...
Reverse Engineering / Smartphone PenTest
by do son · Published October 31, 2020 · Last modified September 26, 2023
NFCGate NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security of protocols against traffic...
RedPersist RedPersist is a Windows Persistence tool written in C# Usage You can use it with execute-assembly or standalone executable RedPersist.exe –method C:\Path\to\executable.exe RedPersist.exe –help Available Methods –help/-h : Help Menu RedPersist.exe –help –eventviewer : Persistence...
In the era of containerization, Docker Desktop stands tall as a beacon of simplicity for developers. With its one-click-install mechanism and straightforward GUI, developers around the world have embraced Docker Desktop for crafting, running,...
by do son · Published September 25, 2023 · Last modified September 26, 2023
EasyScan EasyScan is a Python script that analyzes the security of a given website by inspecting its HTTP headers and DNS records. The script generates a security report with recommendations for addressing potential vulnerabilities....
The US Cybersecurity & Infrastructure Security Agency (CISA) has ordered federal agencies to address three recently patched zero-day flaws affecting iPhones, Macs, and iPads known to be exploited in attacks. CVE-2023-41991 Apple Multiple Products Improper...
Putting together a social gathering is no mean feat, especially when you consider the wide range of skills required to pull off a successful event. Be it a corporate event, charity gala, product launch,...
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published June 9, 2019 · Last modified September 25, 2023
DefectDojo is an open-source application vulnerability correlation and security orchestration application. It allows you to manage your application security program, maintain product and application information, schedule scans, triage vulnerabilities, and push findings into defect...
S3Scanner A tool to find open S3 buckets in AWS or other cloud providers: AWS DigitalOcean DreamHost GCP Linode Custom The tool takes in a list of bucket names to check. Found S3 buckets...
