of-CORS of-CORS is Truffle Security’s tool suite for identifying and exploiting CORS misconfigurations on the internal networks of bug bounty targets using typosquatting. How Does it Work?? of-CORS is a Python3 web application built on top...
DarkAngel DarkAngel is a fully automatic white hat vulnerability scanner, which can monitor hacker and bugcrowd assets, generate vulnerability reports, and send enterprise WeChat notifications. Currently supported features： Hackerone asset monitoring; Bugcrowd asset monitoring;...
WAF Bypass Tool WAF bypass Tool is an open-source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker...
Super Xray xray is an excellent web vulnerability scanning tool, but only the command line version, starts via config.yaml file. In many cases, it is difficult to get started, and a GUI tool is...
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published February 12, 2023 · Last modified February 19, 2023
Grepmarx – source code static analysis platform for security auditors Grepmarx is a web application providing a single platform to quickly understand, analyze and identify vulnerabilities in possibly large and unknown code bases. Features...
Programming / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published January 31, 2023 · Last modified January 29, 2024
Bearer Bearer is a static application security testing (SAST) tool that scans your source code and analyzes your data flows to discover, filter and prioritize security risks and vulnerabilities leading to sensitive data exposures (PII, PHI, PD). We...
Web Information Gathering / Web Vulnerability Analysis
by do son · Published January 30, 2023 · Last modified September 8, 2023
SCRIPTKIDDI3 Introducing SCRIPTKIDDI3, a powerful recon and initial vulnerability detection tool for Bug Bounty Hunters. Built using a variety of open-source tools and a shell script, SCRIPTKIDDI3 allows you to quickly and efficiently run...
firebaseExploiter FirebaseExploiter is a vulnerability discovery tool that discovers Firebase databases which are open and can be exploitable. Primarily built for mass hunting bug bounties and for penetration testing. Features Mass vulnerability scanning from...
Am I Exploitable? ‘Am I Exploitable?’ is a python open source project that comes to meet the need of validating if your system is exploitable to specific vulnerabilities. The project can help you understand...
REcollapse REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information,...
DNS Analysis Server Tools to assess DNS security. This is an updated and more generic version of the DNS Reset Checker. Background DNS security? The DNS (Domain Name System) is a central part of the...
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published December 20, 2022 · Last modified December 6, 2023
OSV-Scanner Use OSV-Scanner to find existing vulnerabilities affecting your project’s dependencies. OSV-Scanner provides an officially supported frontend to the OSV database that connects a project’s list of dependencies with the vulnerabilities that affect them. Since...
Web Information Gathering / Web Vulnerability Analysis
by do son · Published December 18, 2022 · Last modified July 17, 2023
Vesta Vesta is a static analysis of vulnerabilities, Docker, and Kubernetes cluster configuration detect toolkit. It inspects Kubernetes and Docker configures cluster pods and containers with safe practices. It also analyses image or container...
BlueMap The BlueMap is an interactive tool for identifying IAM misconfigurations, information gathering, abuse of managed identities, detection of user permissions, and much more. All are in interactive mode without ANY third-party dependencies (such...
SEVulDet SEVulDet is a semantics-enhanced deep learning-based framework that can accurately pinpoint vulnerability patterns by extracting, preserving, and learning more semantics. Details of SEVulDet Recent years have seen increased attention to deep learning-based vulnerability...
Secure Your Connection
