Journalism is the collection of reports and analysis of recent events and happenings in the society. News media work independently and has the right to freedom of speech using various mediums like print media,...
Web Information Gathering / Web Vulnerability Analysis
by do son · Published April 20, 2020 · Last modified July 1, 2020
wsltools – Web Scan Lazy Tools wsltools is an elegant and simple Web Scan auxiliary library for Python. Changelog v0.2.4 update urlclean.mixPayload Install >>> pip install wsltools Use User Guide Tree: urlclean ast etl...
Attacking and Auditing Docker Containers and Kubernetes Clusters An organization using microservices or any other distributed architecture relies heavily on containers and container orchestration engines like Kubernetes and as such its infrastructure security is...
Information Gathering / Web Information Gathering
by do son · Published April 19, 2020 · Last modified October 25, 2022
RedRabbit RedRabbit is a PowerShell script aimed at helping pentesters conduct ethical hacking #RedTeam. The aim is to highlight just how Powerful PowerShell is and how it can be used against you (Ethically). Features:...
authelia Authelia is an open-source authentication and authorization server providing 2-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion of reverse proxies like nginx, Traefik or HAProxy to let them...
ROADtools (Rogue Office 365 and Azure (active) Directory tools) ROADtools is a framework to interact with Azure AD. It currently consists of a library (roadlib) and the ROADrecon Azure AD exploration tool. ROADlib ROADlib is a library...
Elemental Elemental is a centralized threat library of MITRE ATT&CK techniques, Atomic Red Team tests, and over 280 Sigma rules. It provides an alternative way to explore the ATT&CK dataset, mapping relevant Atomic Red...
Travel APIs can form the backbone of many brilliant new app concepts, but unless you know which of the many different options to use, you might find yourself overwhelmed by just how varied and...
Programming / Web Vulnerability Analysis
by do son · Published April 16, 2020 · Last modified January 23, 2024
INTERCEPT Stupidly easy to use, small footprint Policy as Code subsecond command-line scanner that leverages the power of the fastest multi-line search tool to scan your codebase. It can be used as a linter, guard...
You’re an Android user. Makes sense, as nearly 85% of the global population have adopted Google’s platform as their mobile operating system of choice. There are plenty of reasons, but one of the main...
In recent years, driveways have become a preferred spot for home invasions. You see, we have burglar bars, security alarms, and numerous other methods and devices to keep the insides of our homes safe....
PowerShell Reverse TCP PowerShell script for connecting to a remote host. The remote host will have full control over the client’s PowerShell and all its underlying commands. Tested with PowerShell v5.1.18362.752 on Windows 10...
Klar Integration of Clair and Docker Registry (supports both Clair API v1 and v3) Klar is a simple tool to analyze images stored in a private or public Docker registry for security vulnerabilities using...
OSSEM A tool to assess data quality, built on top of the awesome OSSEM project. Mission Answer the question: I want to start hunting ATT&CK techniques, what log sources and events are more suitable? Create transparency...
Parsec Parsec is free software (AGPL v3) aiming at easily share your work and data in the cloud in total privacy thanks to cryptographic security. Key features: Works like a virtual drive on your...
Secure Your Connection
