pixload — Image Payload Creating tools Set of tools for creating/injecting payload into images. Install sudo apt install libgd-perl libimage-exiftool-perl libstring-crc32-perl git clone https://github.com/chinarulezzz/pixload.git Use bmp.pl BMP Payload Creator/Injector. Example...
ArmourBird CSF – Container Security Framework ArmourBird CSF – Container Security Framework is an extensible, modular, API-first framework build for regular security monitoring of docker installations and containers against CIS and...
Web Exploitation / Web Vulnerability Analysis
by do son · Published August 30, 2019 · Last modified August 24, 2023
Tamper injection data Option: –tamper sqlmap itself does no obfuscation of the payload sent, except for strings between single quotes replaced by their CHAR()-alike representation. More information about programming you can find...
Web Exploitation / Web Vulnerability Analysis / WebApp PenTest
by do son · Published August 29, 2019 · Last modified November 4, 2024
Today we introduce two batches of test injection point skills, this method can also be used for another FUZZ test. Use “Save items” to export HTTP/HTTPS packages to test Save...
Break out the Box (BOtB) BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies....
Crypto / Reverse Engineering / Sniffing & Spoofing / Social Engineering / Web Information Gathering / Web Vulnerability Analysis
by do son · Published August 20, 2019 · Last modified October 10, 2021
REBEL-FRAMEWORK Advanced and easy to use penetration testing framework Module├ ├ net/iface ➤ Interface info. ├ net/map ➤ Hosts live Scan in LAN. ├ net/scan ➤ Scan [Ports, OS, Etc]...
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published August 15, 2019 · Last modified November 4, 2024
nmap_vulners NSE script using some well-known service to provide info on vulnerabilities The only thing you should always keep in mind is that the script depends on having software versions...
Information Gathering / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis
by do son · Published August 10, 2019 · Last modified September 28, 2024
nmap (“Network Mapper“) is an open-source tool for network exploration and security auditing. It was designed to rapidly scan large networks, although it works fine to scan single hosts. nmap...
Attack Surface Mapper Attack Surface Mapper is a reconnaissance tool that uses a mixture of open-source intelligence and active techniques to expand the attack surface of your target. You feed...
Defense / Malware Analysis / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published August 4, 2019 · Last modified April 20, 2022
Dagda is a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running Docker containers...
Web Exploitation / Web Vulnerability Analysis
by do son · Published August 2, 2019 · Last modified May 1, 2024
WhatWaf is an advanced firewall detection tool whose goal is to give you the idea of “There’s a WAF?”. WhatWaf works by detecting a firewall on a web application and...
Electronegativity It is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as described in the “Electron Security Checklist –...
Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of the...
Tracy A pentesting tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner. tracy should be used during the mapping-the-application...
Defense / Web Vulnerability Analysis
by do son · Published July 30, 2019 · Last modified November 4, 2021
CloudMapper CloudMapper generates network diagrams of Amazon Web Services (AWS) environments and displays them via your browser. It helps you understand visually what exists in your accounts and identify possible...
Support Securityonline.info site. Thanks!
