Security Assessment Scripts were written to aid automated scanning during whitebox security/vuln assessments Poc’s Invoke-WinEnum.ps1 Invoke-WinEnum – Check Windows host security (thx to Harmj0y, lkys37en, and A-mIn3) General System Information...
Firmware Slap Firmware slap combines concolic analysis with function clustering for vulnerability discovery and function similarity in firmware. Firmware slap is built as a series of libraries and exports most...
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published August 15, 2019 · Last modified November 4, 2024
nmap_vulners NSE script using some well-known service to provide info on vulnerabilities The only thing you should always keep in mind is that the script depends on having software versions...
Information Gathering / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis
by do son · Published August 10, 2019 · Last modified September 28, 2024
nmap (“Network Mapper“) is an open-source tool for network exploration and security auditing. It was designed to rapidly scan large networks, although it works fine to scan single hosts. nmap...
Clair Clair is an open-source project for the static analysis of vulnerabilities in application containers (currently including appc and docker). In regular intervals, Clair ingests vulnerability metadata from a configured set of sources and...
SMTPTester SMTPTester is a python3 tool to test SMTP server for 3 common vulnerabilities: Spoofing – The ability to send a mail on behalf of an internal user Relay –...
Defense / Malware Analysis / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published August 4, 2019 · Last modified April 20, 2022
Dagda is a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running Docker containers...
AutoRecon AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services. It is intended as a time-saving tool for use in CTFs and other penetration testing environments...
Azucar is a multi-threaded plugin-based tool to help assess the security of Azure Cloud environment subscription. By leveraging the Azure API, Azucar automatically gathers a variety of configuration data and...
Information Gathering / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis
by do son · Published July 29, 2019 · Last modified May 1, 2024
ATSCAN SCANNER Advanced Search / Dork / Mass Exploitation Scanner Description Search engine Google / Bing / Ask / Yandex / Sogou ● Mass Dork Search ● Multiple instant scans....
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published July 28, 2019 · Last modified October 10, 2021
snyk Snyk helps you find, fix and monitor known vulnerabilities in Node.js npm, Ruby and Java dependencies, both on an ad hoc basis and as part of your CI (Build)...
tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities....
Defense / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published July 27, 2019 · Last modified May 9, 2022
HubbleStack (Hubble for short) is a modular, open-source, security & compliance auditing framework which is built in python, using SaltStack as a library. It provides on-demand profile-based auditing, real-time security...
Protocol Analyzer (NetProtoFuzz) Protocol-oriented fuzz testing framework for network protocols. The main purposes of the framework Verification of the operation of proprietary network protocols in accordance with the declared description;...
Programming / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published July 22, 2019 · Last modified September 24, 2020
Eclipse Steady (Incubator Project) Discover, assess and mitigate known vulnerabilities in your Java and Python projects Eclipse Steady supports software development organizations in regard to the secure use of open-source...
Support Securityonline.info site. Thanks!
