Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published July 26, 2022 · Last modified October 25, 2022
Packj flags malicious/risky open-source packages Packj (pronounced package) is a command-line (CLI) tool to vet open-source software packages for “risky” attributes that make them vulnerable to supply chain attacks. This is the tool behind...
RESTler What is RESTler? RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. For a given cloud service...
GraphCrawler Graph Crawler is an automated testing toolkit for any GraphQL endpoint. It will run through and check if the mutation is enabled, check for any sensitive queries available, such as users and files,...
File Upload Vulnerability Scenarios (Challenges) This repository is a dockerized PHP application containing some file upload vulnerability challenges (scenarios). OWASP References: Classification: Web Application Security Testing > 10-Business Logic Testing WSTG: WSTG-BUSL-09 Bypass Techniques The...
Bypass Url Parser A tool that tests MANY urls bypasses to reach a 40X protected page. If you wonder why this code is nothing but a dirty curl wrapper, here’s why: Most of the python requests...
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published June 21, 2022 · Last modified May 1, 2024
chain-bench Chain-bench is an open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark. The auditing focuses on the entire SDLC process, where...
XSS Vulnerability Scenarios (challenges) This repository is a Dockerized php application containing some XSS vulnerability challenges. The ideas behind the challenges are: Javascript validation bypass html entities bypass WAF bypass Black-list validation bypass Basic...
MITM Intercept A little bit less hackish way to intercept and modify non-HTTP protocols through Burp and others with SSL and TLS interception support. This tool is for researchers and applicative penetration testers that...
Web Information Gathering / Web Vulnerability Analysis
by do son · Published May 30, 2022 · Last modified May 1, 2024
haxunit HaxUnit combines multiple active and passive subdomain enumeration tools and port scanning tools with vulnerability discovery tools. For each subdomain enumeration tool, you’ll be prompted to add the newly discovered subdomains to the...
CRLFsuite CRLFsuite is a fast tool specially designed to scan CRLF injection. Features ✔️ Single URL scanning ✔️ Multiple URL scanning ✔️ Stdin supported ✔️ GET & POST method supported ✔️ Concurrency ✔️ Best Payloads list ✔️ Headers supported ✔️ Fast and...
Jeeves Jeeves is made for looking to Time-Based Blind SQLInjection through recon. Install > go install github.com/ferreiraklet/Jeeves@latest OR > git clone https://github.com/ferreiraklet/Jeeves.git > cd Jeeves > go build jeeves.go > chmod +x jeeves ./jeeves...
What is ReDoS vulnerability? A regular expression is the most known text processing utility for programmers. There are many tools to use regular expression: grep, awk, and perl for example. Besides, a regular expression is used for...
pocsploit pocsploit is a lightweight, flexible, and novel open-source poc verification framework. Pain points of the POC framework in the market There are too many parameters, I don’t know how to get started, but...
OWASP WrongSecrets Welcome to the OWASP WrongSecrets p0wnable app. With this app, we have packed various ways of how to not store your secrets. These can help you to realize whether your secret management...
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published May 4, 2022 · Last modified February 26, 2024
What is afrog afrog is an excellent performance, fast and stable, PoC customizable vulnerability scanning (hole digging) tool. PoC involves CVE, CNVD, default password, information leakage, fingerprint identification, unauthorized access, arbitrary file reading, command...
Secure Your Connection
