GraphQLmap GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. Features and examples ⚠️ Examples are based on several CTF challenges from HIP2019. Dump a GraphQL...
Information Gathering / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis
by do son · Published January 23, 2020 · Last modified February 6, 2022
nray Nray is a free, platform and architecture-independent port and application layer scanner. Apart from regular targets (list of hosts/networks), it supports dynamic target selection, based on sources like certificate...
See-SURF A Python-based scanner to find potential SSRF parameters in a web application. Motivation SSRF being one of the critical vulnerabilities out there in the web, I see there was...
Project Black Scope control, scope scanner and progress tracker for easier working on a bug bounty or pentest project Anatoly Ivanov of Positive Technologies What is this tool for? The tools...
B-XSSRF Toolkit to detect and keep track on Blind XSS, XXE & SSRF SETUP git clone https://github.com/SpiderMate/B-XSSRF.git Upload the files to your server. Create a Database and upload database.sql file to it....
Injectus Simple python tool that goes through a list of URLs trying CRLF and open redirect payloads. Design If we have the following URL: https://dubell.io/?param1=value1&url=value2¶m3=value3 For CRLF attacks, Injectus will...
Aaia (A)n(a)lysis of (I)dentity and (A)ccess What does Aaia do? Aaia (pronounced as shown here ) helps in visualizing AWS IAM and Organizations in a graph format with help of Neo4j....
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published January 7, 2020 · Last modified December 4, 2020
npq safely* install packages with npm/yarn by auditing them as part of your install process. npq will perform the following steps to sanity check that the package is safe by employing...
Jwtear A modular Command-line tool to parse, create and manipulate JSON Web Token(JWT) tokens for security testing purposes. Features Complete modularity. All commands are plugins. Easy to add new plugins....
TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations. You can read the technique here. Cross-origin resource sharing (CORS) is a mechanism that allows restricted resources...
Programming / Web Vulnerability Analysis
by do son · Published December 30, 2019 · Last modified August 27, 2023
PHP Fuzzer This library implements a fuzzer for PHP, which can be used to find bugs in libraries (particularly parsing libraries) by feeding them “random” inputs. Feedback from edge coverage instrumentation is...
cspparse cspparse is a tool to evaluate Content Security Policies. It uses Google’s API to retrieve the CSP Headers and returns them in ReconJSON format. Not only does it check for...
Information Gathering / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis
by do son · Published December 25, 2019 · Last modified January 17, 2023
Goby – Attack surface mapping The new generation of network security technology achieves rapid security emergencies through the establishment of a complete asset database for the target. Scan Asset Scanning...
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published December 22, 2019 · Last modified November 27, 2022
git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search...
by do son · Published December 15, 2019 · Last modified September 2, 2021
Burp Bounty – Scan Check Builder This Burp Suite extension allows you, in a quick and simple way, to improve the active and passive burpsuite scanner by means of personalized...
Support Securityonline.info site. Thanks!
Akira Ransomware Exploit CVE-2024-40766 in SonicWall SonicOS
October 21, 2024
