Group3r Like its ancestors, Group3r is a tool for pentesters and red teamers to rapidly enumerate relevant settings in AD Group Policy and to identify exploitable misconfigurations in the same....
ZKar ZKar is a Java serialization protocol analysis tool implemented in Go. This tool is still a work in progress, so no complete API document and contribution guide. ZKar provides:...
Information Gathering / Vulnerability Analysis
by do son · Published March 1, 2022 · Last modified November 4, 2024
nrich A command-line tool to quickly analyze all IPs in a file and see which ones have open ports/ vulnerabilities. Can also be fed data from stdin to be used...
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published February 21, 2022 · Last modified February 16, 2023
cherrybomb Cherrybomb is a CLI tool that helps you avoid undefined user behavior by validating your API specifications. Our CLI tool is open source, enabling support from both the OpenAPI...
365Inspect Further the state of O365 security by authoring a PowerShell script that automates the security assessment of Microsoft Office 365 environments. Use You will interact with 365Inspect by executing...
RISKEN RISKEN is an open-source project designed to allow detection of security risks in Cloud-Service-Provider (Amazon Web Services (AWS), Google Cloud Platform (GCP)), and WEB application, Domain, Source-Code-Management(GitHub)… This DataSource...
LDAP Relay Scan A tool to check Domain Controllers for LDAP server protections regarding the relay of NTLM authentication. If you’re interested in the specifics of the error-based enumeration. There...
HEY SERIAL! Programmatically create hunting rules for deserialization exploitation with multiple keywords (e.g. cmd.exe) gadget chains (e.g. CommonsCollection) object types (e.g. ViewState, Java, Python Pickle, PHP) encodings (e.g. Base64, raw)...
extrude Analyse binaries for missing security features, information disclosure, and more. 🚧 Extrude is in the early stages of development, and currently only supports ELF and MachO binaries. PE (Windows) binaries...
pip-audit pip-audit is a tool for scanning Python environments for packages with known vulnerabilities. It uses the Python Packaging Advisory Database via the PyPI JSON API as a source of vulnerability reports. This...
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published December 19, 2021 · Last modified October 25, 2022
JNDI Exploit Kit This is a forked modified version of the great exploitation tool created by @welk1n. This tool can be used to start an HTTP Server, RMI Server, and...
log4j-detector Detects Log4J versions on your file system within any application that are vulnerable to CVE-2021-44228 and CVE-2021-45046. It is able to even find instances that are hidden several layers deep. Works...
log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts. Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers (not only 3-4...
Programming / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published December 17, 2021
SWAN This branch contains the new generation of the SWAN framework. The SWAN version described in our ESEC/FSE 2020 paper is located on this branch. This paper no longer represents the current state of...
espoofer espoofer is an open-source testing tool to bypass SPF, DKIM, and DMARC authentication in email systems. It helps mail server administrators and penetration testers to check whether the target email...
Support Securityonline.info site. Thanks!
