Web Exploitation / Web Vulnerability Analysis
by do son · Published October 12, 2022 · Last modified November 8, 2023
Ghauri An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws Features Supports the following types of injection payloads: Boolean based. Error Based Time-Based Stacked Queries Support SQL...
EasyEASM Easy EASM is just that… the easiest to set up tool to give your organization visibility into its external facing assets. The industry is dominated by $30k vendors selling “Attack Surface Management,” but...
WAF Bypass Tool WAF bypass Tool is an open-source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker...
Nuclei plugin for BurpSuite A BurpSuite plugin intended to help with nuclei template generation. Features Template matcher generation Word and Binary matcher creation using selected response snippets from Proxy history or Repeater contexts Multi-line selections are split to separate words for readability Binary...
Logsensor A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning Features login panel Scanning for multiple hosts Proxy compatibility (http, https) Login panel scanning is done in multiprocessing Installation git...
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published July 17, 2023 · Last modified November 6, 2023
Daksh SCRA (Source Code Review Assist) The tool currently offers the following functionalities: Options to use programming language-specific rules specific for finding areas of interests Option to extend or add new rules for any...
Programming / Web Vulnerability Analysis
by do son · Published June 17, 2020 · Last modified November 6, 2023
Semgrep Semgrep is a command-line tool for offline static analysis. Use pre-built or custom rules to enforce code and security standards in your codebase. You can try it now with our interactive live editor. Semgrep combines the...
Bugsy Bugsy is a command-line interface (CLI) tool that provides automatic security vulnerability remediation for your code. It is the community edition version of Mobb, the first vendor-agnostic automated security vulnerability remediation tool. Bugsy is...
Nekuda – IDN-Squatting Detector Domain Lookalikes A domain lookalike is a domain name that is similar to a legitimate domain name but with slight differences. These differences can be in the spelling of the...
WebCopilot WebCopilot is an automation tool designed to enumerate subdomains of the target and detect vulnerabilities using different open-source tools. The script first enumerates all the subdomains of the given target domain using assetfinder,...
