Programming / Web Vulnerability Analysis
by do son · Published April 20, 2019 · Last modified September 5, 2022
Security Code Scan – static code analyzer for .NET security-code-scan is a vulnerability Patterns Detector for C# and VB.NET. Facts Detects various security vulnerability patterns: SQL Injection, Cross-Site Scripting (XSS), Cross-Site...
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published April 12, 2019 · Last modified April 11, 2023
Archery is an opensource vulnerability assessment and management tool which helps developers and pentesters to perform scans and manage vulnerabilities. Archery uses popular opensource tools to perform comprehensive scanning for...
PENTOL PENTOL – Pentester Toolkit is built as a plugin for the Fiddler HTTP debugging proxy. Features CORS DETECTED Cross-Origin Resource Sharing CRLF DETECTED HTTP response splitting JSON DETECTED CSP DETECTED Headers...
PyRecommender Recommends optimal injection code for you. PyRecommender can recommend optimal injection code for detecting web app vulnerabilities. Current PyRecommender’s version is beta, it only supports reflective Cross Site Scripting (RXSS)....
Crawleet Web Recon & Exploitation Tool. It detects and exploits flaws in: Drupal Joomla Magento Moodle OJS Struts WordPress And enumerates themes, plugins and sensitive files Also detects: Crypto mining...
AWS Security tools Bunch of scripts for AWS Pentest lambda/lambda_dumper.py – Script to Dump AWS Lambda functions lambda/lambda_backdoor.py – Backdoor AWS users iam/iam_user_enum – Bruteforce IAM usernames iam/assume_role_enum – Enumerate...
Web Exploitation / Web Vulnerability Analysis / WebApp PenTest
by do son · Published April 9, 2019 · Last modified April 8, 2019
tomcatWarDeployer Apache Tomcat auto WAR deployment & pwning penetration testing tool. What is it? This is a penetration testing tool intended to leverage Apache Tomcat credentials in order to automatically...
Web Exploitation / Web Vulnerability Analysis / WebApp PenTest
by do son · Published March 29, 2019 · Last modified March 28, 2019
OWASP Offensive Web Testing Framework (OWTF) is a project focused on penetration testing efficiency and alignment of security tests to security standards like the OWASP Testing Guide (v3 and v4),...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published March 25, 2019 · Last modified November 4, 2024
Blisqy Blisqy is a tool to aid Web Security researchers to find Time-based Blind SQL injection on HTTP Headers and also exploitation of the same vulnerability. The exploitation enables slow...
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published March 22, 2019 · Last modified November 4, 2024
getsploit Command line search and download tool for Vulners Database inspired by searchsploit. It allows you to search online for the exploits across all the most popular collections: Exploit-DB, Metasploit, Packetstorm, and others. The most powerful...
Kubeletmein This is a simple penetration testing tool which takes advantage of public cloud provider approaches to provide kubelet credentials to nodes in a Kubernetes cluster in order to gain...
Information Gathering / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis
by do son · Published March 18, 2019 · Last modified October 25, 2022
Offensive ELK: Elasticsearch for Offensive Security Traditional “defensive” tools can be effectively used for Offensive security data analysis, helping your team collaborate and triage scan results. In particular, Elasticsearch offers...
Freddy the Serial(isation) Killer – Deserialization Bug Finder A Burp Suite extension to aid in detecting and exploiting serialization libraries/APIs. Based on the work of Alvaro Muñoz and Oleksandr Mirosh, Friday...
XanXSS XanXSS is a reflected XSS searching tool (DOM coming soon) that creates payloads based from templates. Unlike other XSS scanners that just run through a list of payloads. XanXSS...
Information Gathering / Network PenTest / Password Attacks / Vulnerability Analysis / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published February 20, 2019 · Last modified November 4, 2024
SPARTA is a python GUI application which simplifies network infrastructure penetration testing by aiding the penetration tester in the scanning and enumeration phase. It allows the tester to save time...
Support Securityonline.info site. Thanks!
