Programming / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published November 18, 2019
AURA – Security Auditing and code introspection The current trend in the development is to use a lot of packages in the development phase, even if they provide only trivial functionality and consist of...
prvd – PHP Runtime Vulnerability Detection prvd is able to detect the following types of vulnerabilities: Command Injection File Inclusion File Upload SQL Injection SQL Injection (Blind) Partial XSS Installation git clone https://github.com/fate0/prvd.git /data/prvd...
Fracker Fracker is a suite of tools that allows to easily trace and analyze PHP function calls, its goal is to assist the researcher during manual security assessments of PHP applications. It consists of:...
ShellCheck – A shell script static analysis tool The goals of ShellCheck are To point out and clarify typical beginner’s syntax issues that cause a shell to give cryptic error messages. To point out...
Intensio-Obfuscator Intensio-Obfuscator tool takes a python source code and transforms it into an obfuscated python code Replace all names of variables/classes/functions/files-name to random strings with a length defined and all chars to their hexadecimal value Remove all comments, all spaces...
Programming / Web Vulnerability Analysis
by do son · Published July 24, 2019 · Last modified December 5, 2023
Brakeman Brakeman is an open-source static analysis tool that checks Ruby on Rails applications for security vulnerabilities. It can detect: Possibly unescaped model attributes or parameters in views (Cross-Site Scripting) Bad string interpolation in...
Programming / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published July 22, 2019 · Last modified September 24, 2020
Eclipse Steady (Incubator Project) Discover, assess and mitigate known vulnerabilities in your Java and Python projects Eclipse Steady supports software development organizations in regard to the secure use of open-source components during application development....
Information Gathering / Programming / Web Information Gathering
by do son · Published July 20, 2019 · Last modified July 10, 2022
Shodan is a search engine for Internet-connected devices. Google lets you search for websites, Shodan lets you search for devices. This library provides developers easy access to all of the data stored in Shodan...
PHPStan – PHP Static Analysis Tool PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves...
What is CTFd? CTFd is a Capture The Flag framework focusing on ease of use and customizability. It comes with everything you need to run a CTF and it’s easy to customize with plugins...
Programming / Web Vulnerability Analysis
by do son · Published July 2, 2019 · Last modified January 11, 2023
progpilot A static analyzer for security purposes – Only PHP language is currently supported. Changelog v1.0.2 Fix new bug reported in #44 update dependencies Use Download the latest phar archive in releases folder (or builds folder for dev versions)....
Programming / Web Vulnerability Analysis
by do son · Published July 1, 2019 · Last modified March 9, 2023
Overview Bandit is a tool designed to find common security issues in Python code. To do this Bandit processes each file builds an AST from it and runs appropriate plugins against the AST nodes....
Programming / Vulnerability Analysis
by do son · Published June 29, 2019 · Last modified September 19, 2023
Cppcheck Cppcheck is a static analysis tool for C/C++ code. It provides a unique code analysis to detect bugs and focuses on detecting undefined behavior and dangerous coding constructs. The goal is to detect only real errors...
Information Gathering / Programming / Web Information Gathering
by do son · Published June 4, 2019 · Last modified May 30, 2023
nmap This library aims at providing idiomatic nmap bindings for go developers, in order to make it easier to write security audit tools using golang. What is nmap Nmap (Network Mapper) is a free and open-source...
CodeAlchemist CodeAlchemist is a JavaScript engine fuzzer that improves classic grammar-based JS engine fuzzers by a novel test case generation algorithm, called a semantics-aware assembly. The details of the algorithm are in our paper,...
Secure Your Connection
