Exploitation / Information Gathering / Maintaining Access / Network PenTest / Post Exploitation / Vulnerability Analysis / Web Exploitation / Web Information Gathering / Web Maintaining Access / Web Vulnerability Analysis / WebApp PenTest
by do son · Published August 6, 2017
PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others. Contents Contents Network Analysis IP Whois DNS...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 31, 2017 · Last modified November 4, 2024
WebVulScan Synopsis WebVulScan is a web application vulnerability scanner. It is a web application itself written in PHP and can be used to test remote, or local, web applications for...
Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 25, 2017 · Last modified November 4, 2024
AngryFuzz3r project AngryFuzz3r is a collection of tools for pen testing to gather information and discover vulnerabilities of the targets based on Fuzzedb https://github.com/fuzzdb-project/fuzzdb project UrlFuzz3r->AngryFuzz3r_1 Discover hidden files and directories on...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 25, 2017 · Last modified August 6, 2017
Collection of Cross-Site Scripting (XSS) Payloads
Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 22, 2017 · Last modified November 4, 2024
fuxploider fuxploider is an open source penetration testing tool that automates the process of detecting and exploiting file upload forms flaws. This tool is able to detect the file types...
Smartphone PenTest / Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 22, 2017 · Last modified August 5, 2017
BadIntent Introduction BadIntent is the missing link between the Burp Suite and the core Android’s IPC/Messaging-system. BadIntent consists of two parts, an Xposed-based module running on Android and a Burp-plugin....
Web Exploitation / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 17, 2017 · Last modified May 30, 2018
The current sections are divided as follows: Philosophy Discovery Mapping Authorization and Sessions Tactical fuzzing XSS SQLi File Inclusion CSRF Privilege, Transport and Logic Web services Mobile vulnerabilities Auxiliary Information...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 14, 2017 · Last modified November 4, 2024
burp-vulners-scanner Burp Suite scanner plugin based on Vulners.com vulnerability database API Search fingerprints in http response (inspired by plugin “Software Version Reporter”) and check found version in vulners.com vulnerability database [Experemental] Check...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 14, 2017 · Last modified October 10, 2021
Susanoo Susanoo is a REST API security testing framework. Features Configurable inputs/outputs formats API Vulnerability Scan: Normal scanning engine that scans for IDOR, Authentication issues, SQL injections, Error stacks. Smoke...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 12, 2017 · Last modified November 4, 2024
Fuzzapi is rails application which uses API_Fuzzer and provide UI solution for gem. Setup Install ruby in your machine either using rvm or rbenv Clone the repository into your...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 12, 2017 · Last modified May 8, 2018
WSSAT is an open source web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files. This tool accepts...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 7, 2017 · Last modified November 4, 2024
Java Deserialization Scanner is a Burp Suite plugin aimed at detect and exploit Java deserialization vulnerabilities. It was written by Federico Dotta, a Security Advisor at @ Mediaservice.net. The plugin...
Exploitation / Network PenTest / Sniffing & Spoofing / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest / Wireless
by do son · Published July 5, 2017 · Last modified November 5, 2017
Katana Framework katana is a framework written in python for making penetration testing, based on a simple and comprehensive structure for anyone to use, modify and share, the goal...
Web Exploitation / Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 5, 2017 · Last modified November 4, 2024
sqlite-lab This code is vulnerable to SQL Injection and having SQLite database. During practicing one challenge i faced SQLI vulnerable script with SQLite database integrated with it For SQLite database,...
Web Exploitation / Web Maintaining Access / Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 4, 2017 · Last modified November 4, 2024
LFI Suite is a totally automatic tool able to scan and exploit Local File Inclusion vulnerabilities using many different methods of attack, listed in the section Features. Features Works with Windows, Linux...
Support Securityonline.info site. Thanks!
Akira Ransomware Exploit CVE-2024-40766 in SonicWall SonicOS
October 21, 2024
