Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published May 4, 2018 · Last modified October 10, 2021
WPHunter – A WordPress Vulnerability Scanner You can use this tool on your wordpress website to check the security of your website by finding the vulnerability in your website. Over 75 million websites run...
DomLink It is a tool that uses a domain name to discover organization name and associated e-mail address to then find further associated domains. This is useful for bug bounty and red team engagements...
Vulnerable Web applications Generator Status quo Supporting very limited modules, such as SQLI, NOSQLI, LFI, CRLF, Command Injection, and XSS. There are two important modules which play the essential role in deploying vulnerable web apps. unfilter module scraps the sites and...
Network PenTest / Password Attacks / Vulnerability Analysis / Web Vulnerability Analysis / WebApp PenTest
by do son · Published May 2, 2018
Passhunt Passhunt is a simple tool for searching for default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords. How to install? How do I...
Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published April 27, 2018
Optiva-Framework: Web Application Scanner You can use this Framework on your website to check the security of your website by finding the vulnerability in your website or you can use this tool to Get admin...
Exploitation / Forensics / Information Gathering / Network PenTest / Reverse Engineering / Sniffing & Spoofing / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest / Wireless
by do son · Published April 25, 2018
PloitKit is a Python-based GUI tool designed as one-stop for all other software. I was facing these kinds of problem when I need to switch to the different system, or I lost my pen-drive....
What is DNS Parallel Prober? This is a parallelized domain name prober to find as many subdomains of a given domain as fast as possible. PLEASE NOTE this script probes DNS servers actively, so please...
tinyctf-platform tinyctf-platform is yet another open-source (jeopardy style) CTF platform. It is relatively easy to set up and modify. Deployment Note: Flask should run on top of a proper web server if you plan...
pymeta Pymeta is a Python3 rewrite of the tool PowerMeta, created by dafthack in PowerShell. It uses specially crafted search queries to identify and download the following file types (pdf, xls, xlsx, doc, docx, ppt, pptx) from...
vcsmap vcsmap is a plugin-based tool to scan public version control systems (currently GitHub and possibly Gitlab soon) for sensitive information like access tokens and credentials. Installation $ gem install vcsmap Usage vcsmap already includes...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published April 9, 2018 · Last modified October 10, 2021
The BuQuikker This project is intended to show how easy it is to find poorly configured AWS buckets. This project is built on top of bucketeer. It should make the life of a bug-bounty hunter...
poly A python script that generates polymorphic webshells. Use it to encode your favorite shell and make it practically undetectable. If no shell is specified with the -p argument, the default shell in the...
Web Exploitation / Web Vulnerability Analysis / WebApp PenTest
by do son · Published April 8, 2018 · Last modified December 19, 2019
XSStrike is an advanced XSS detection suite. It has a powerful fuzzing engine and provides zero false-positive results using fuzzy matching. XSStrike is the first XSS scanner to generate its own payloads. It is...
Information Gathering / Vulnerability Analysis / Web Information Gathering
by do son · Published April 7, 2018 · Last modified October 25, 2021
envizon – the network visualization tool This tool is designed, developed, and supported by evait security. In order to give something back to the security community, we publish our internally used and developed, state-of-the-art...
CloudFrunt CloudFrunt is a tool for identifying misconfigured CloudFront domains. CloudFront is a Content Delivery Network (CDN) provided by Amazon Web Services (AWS). CloudFront users create “distributions” that serve content from specific sources (an...
