WPScan Web Interface A centralized dashboard for running and scheduling WordPress scans powered by the wpscan utility. It has the following features: Login Page- Authentication is required to access the...
Vulners-lookup A small script to perform vulnerabilities/exploits lookup on Vulners Database (https://vulners.com/). Vulners aggregates lots of various sources (including exploit-db, 0day.today, Nessus db, OpenVAS db…), see https://vulners.com/stats for a complete list. This...
What is XSS Chef? XSS Chef is a small React.js application inspired by CyberChef, which provides users with a modular way to build JavaScript payloads to typically be used during penetration...
Kube-hunter hunts for security weaknesses in Kubernetes clusters. The tool was developed to increase awareness and visibility for security issues in Kubernetes environments. You should NOT run kube-hunter on a Kubernetes...
Programming / Smartphone PenTest / Web Exploitation / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published February 4, 2019 · Last modified October 10, 2021
Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between...
Bolt A dumb CSRF scanner Workflow Crawling Bolt crawls the target website to the specified depth and stores all the HTML forms found in a database for further processing. Evaluating...
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published January 20, 2019 · Last modified January 19, 2019
freevulnsearch This NMAP NSE script is part of the Free OCSAF project – https://freecybersecurity.org. In conjunction with the version scan “-sV” in NMAP, the corresponding vulnerabilities are automatically assigned using CVE...
Sagacity Sagacity is a vulnerability assessment and compliance data management tool designed to make security testing more efficient, effective and complete. Security assessments, especially those done for DoD and Federal...
Web Information Gathering / Web Vulnerability Analysis
by do son · Published January 18, 2019 · Last modified February 1, 2022
snallygaster Tool to scan for secret files on HTTP servers. snallygaster is a tool that looks for files accessible on web servers that shouldn’t be public and can pose a...
Framework for Testing WAFs (FTW) Purpose This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset...
XSRF Probe XSRF Probe is an advanced Cross-Site Request Forgery Audit Toolkit equipped with Powerful Crawling and Intelligent Token Generation Capabilities. Some Features: Performs several types of checks before declaring an endpoint...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published December 26, 2018 · Last modified October 25, 2022
bXSS bXSS is a simple Blind XSS application adapted from https://cure53.de/m, you can read about it here. bXSS supports the following: Intrusive Levels Email Auto report via /.well-known/security.txt Twilio Slack Webex Teams...
Exploitation / Information Gathering / Vulnerability Analysis / Web Exploitation / Web Information Gathering / Web Vulnerability Analysis
by do son · Published December 10, 2018 · Last modified October 10, 2021
Pocsuite is an open-sourced remote vulnerability testing and proof-of-concept development framework developed by the Knownsec Security Team. It comes with a powerful proof-of-concept engine, many niche features for the ultimate penetration...
ADAPT is a tool that performs Automated Penetration Testing for WebApps. It is designed to increase accuracy, speed, and confidence in penetration testing efforts. ADAPT automatically tests for multiple industry...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published December 4, 2018 · Last modified October 24, 2021
RapidScan – The Multi-Tool Web Vulnerability Scanner It is quite a fuss for a pentester to perform binge-tool-scanning (running security scanning tools one after the other) sans automation. Unless you are a pro...
Support Securityonline.info site. Thanks!
