Tiuku Tiuku is a tool for scanning various kinds of systems and environments for security-related information and displaying the results in a browser-based user interface. It can also detect and...
Windows Feature Hunter (WFH) Windows Feature Hunter (WFH) is a proof of concept python script that uses Frida, a dynamic instrumentation toolkit, to assist in potentially identifying common “vulnerabilities” or “features”...
Programming / Vulnerability Analysis
by do son · Published June 5, 2021 · Last modified April 9, 2023
joern Joern is a platform for robust analysis of C/C++ code. It generates code property graphs, a graph representation of code for cross-language code analysis. Code property graphs are stored...
Red-Shadow Lightspin AWS IAM Vulnerability Scanner Scan your AWS IAM Configuration for shadow admins in AWS IAM based on misconfigured deny policies not affecting users in groups discovered by Lightspin’s...
Krane Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents the current...
Red-Detector Scan your EC2 instance to find its vulnerabilities using Vuls. Audit your EC2 instance to find security misconfigurations using Lynis. Scan your EC2 instance for signs of a rootkit...
Information Gathering / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis
by do son · Published April 7, 2021
nmapAutomator A script that you can run in the background! Summary The main goal for the nmapAutomator script is to automate all of the processes of recon/enumeration that are run...
Deepfence Runtime Threat Mapper The Deepfence Runtime Threat Mapper is a subset of the Deepfence cloud-native workload protection platform, released as a community edition. This community edition empowers the users...
Machine Learning / Vulnerability Analysis
by do son · Published March 16, 2021 · Last modified October 11, 2021
Adversarial Threat Detector Adversarial Threat Detector makes AI development Secure. In recent years, deep learning technology has been developing, and various systems using deep learning are spreading in our society,...
Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service (ReDoS). Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with...
Network Exploitation, Reconnaissance & Vulnerability Engine (N.E.R.V.E) We believe security scanning should be done continuously. Not daily, weekly, monthly, or quarterly. The benefit of running security scanning continuously can be...
dockle Dockle – Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start dockle helps you: Build Best Practice Docker images Build secure Docker images Checkpoints includes CIS Benchmarks...
Information Gathering / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis
by do son · Published February 28, 2021
Grawler Grawler is the best tool ever, made for automating google dorks it’s a tool written in PHP which comes with a web interface that automates the task of using...
Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python (pypi) requirements.txt, JavaScript (npm) package.json, or PHP (composer) composer.json. What is this...
Defense / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published February 22, 2021 · Last modified December 10, 2023
enlightn Think of Enlightn as your performance and security consultant. Enlightn will “review” your code and server configurations, and give you actionable recommendations on improving performance, security, and reliability! The...
Support Securityonline.info site. Thanks!
Urgent Security Update: Guix System Patches Critical Vulnerability
October 22, 2024
