DefectDojo is an open-source application vulnerability correlation and security orchestration application. It allows you to manage your application security program, maintain product and application information,…
View More django-DefectDojo v1.5.4 rc4 releases: application vulnerability correlation & security orchestration application
PENTOL PENTOL – Pentester Toolkit is built as a plugin for the Fiddler HTTP debugging proxy. Features CORS DETECTED Cross-Origin Resource Sharing CRLF DETECTED HTTP response splitting…
View More PENTOL: Pentester Toolkit for Fiddler2
PyRecommender Recommends optimal injection code for you. PyRecommender can recommend optimal injection code for detecting web app vulnerabilities. Current PyRecommender’s version is beta, it only supports…
View More Recommender: optimal injection code for detecting web app vulnerabilities
Cloud Reports Collects info about various cloud resources and analyzes them against best practices and give a JSON, HTML or PDF reports. Modules Collectors These…
View More cloud reports v1.0.7 releases: Scans your AWS cloud resources and generates reports
Crawleet Web Recon & Exploitation Tool. It detects and exploits flaws in: Drupal Joomla Magento Moodle OJS Struts WordPress And enumerates themes, plugins and sensitive…
View More crawleet: Web Recon & Exploitation Tool
AWS Security tools Bunch of scripts for AWS Pentest lambda/lambda_dumper.py – Script to Dump AWS Lambda functions lambda/lambda_backdoor.py – Backdoor AWS users iam/iam_user_enum – Bruteforce…
View More AWS Security tools: Scripts and tools for AWS Pentest
WPScan is a black box WordPress vulnerability scanner. Changelog v3.5.2 Fixes an error when running wpscan without any argument – wpscanteam/CMSScanner#88 Install Requirement Ruby >= 2.2.2 – Recommended:…
View More wpscan v3.5.2 releases: black box WordPress vulnerability scanner
tomcatWarDeployer Apache Tomcat auto WAR deployment & pwning penetration testing tool. What is it? This is a penetration testing tool intended to leverage Apache Tomcat…
View More tomcatWarDeployer v0.5.2 releases: Apache Tomcat auto WAR deployment & pwning penetration testing tool
XSStrike is an advanced XSS detection suite. It has a powerful fuzzing engine and provides zero false positive results using fuzzy matching. XSStrike is the…
View More XSStrike v3.1.3 released: advanced XSS detection and exploitation suite
Scout Suite is a multi-cloud security auditing tool, which enables assessing the security posture of cloud environments. Using the APIs exposed by cloud providers, Scout…
View More Scout Suite v5.0.0-beta releases: Multi-Cloud Security Auditing Tool