Information Security
is-website-vulnerable finds publicly known security vulnerabilities in a website’s frontend JavaScript libraries Changelog 1.14.5 (2020-10-16) Install npm install -g is-website-vulnerable Use npx is-website-vulnerable https://example.com [–json] [–js-lib] [–mobile|–desktop] [–chromePath] Copyright 2019 Liran Tal <liran.tal@gmail.com> Source: https://github.com/lirantal/
nmap (“Network Mapper“) is an open-source tool for network exploration and security auditing. It was designed to rapidly scan large networks, although it works fine to scan single hosts. nmap uses raw IP packets...
kubesec Security risk analysis for Kubernetes resources Changelog v2.8 edff420 docs: add 2.8.0 release notes and missing links Download Kubesec is available as a: Docker container image at docker.io/kubesec/kubesec:v2 Linux/MacOS/Win binary (get the latest release) Kubernetes Admission...
GRAUDIT Graudit is a simple script and signature sets that allow you to find potential security flaws in source code using the GNU utility grep. It’s comparable to other static analysis applications like RATS,...
BurpCrypto Burpcrypto is a collection of burpsuite encryption plug-ins, supporting AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). Usage Add this jar to your burpsuite’s Extensions. Switch to the BurpCrypto tab, select you to need the...
Dependency-Track Modern applications leverage the availability of existing components for use as building blocks in application development. By using existing components, organizations can dramatically decrease time-to-market. Reusing existing components, however, comes at a cost....
Burp Bounty – Scan Check Builder This Burp Suite extension allows you, in a quick and simple way, to improve the active and passive burpsuite scanner by means of personalized rules through a very...
What is DalFox Just, XSS Scanning and Parameter Analysis tool. I previously developed XSpear, a Ruby-based XSS tool, and this time, a full change occurred during the process of porting with golang!!! and created it...
BOAST The BOAST Outpost for AppSec Testing (v0.1.0) BOAST is a server built to receive and report Out-of-Band Application Security Testing reactions. Some application security tests will only cause out-of-band reactions from the tested...
snallygaster Tool to scan for secret files on HTTP servers. snallygaster is a tool that looks for files accessible on web servers that shouldn’t be public and can pose a security risk. Typical examples...
Suggested Reading