sf

Scannerl is a modular distributed fingerprinting engine implemented past times Kudelski Security . Scannerl tin give the axe fingerprint thousands of targets on a unmarried host, but tin give the axe precisely every bit easily last distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl industrial plant on Debian/Ubuntu/Arch (but volition likely locomote on other distributions every bit well). It uses a master/slave architecture where the master copy node volition distribute the locomote (host(s) to fingerprint) to its slaves (local or remote). The entire deployment is transparent to the user. Why job Scannerl When using conventional fingerprinting tools for large-scale analysis, safety researchers volition oftentimes hitting 2 limitations: first, these tools are typically built for scanning comparatively few hosts at a fourth dimension as well as are inappropriate for large ranges of IP addresses. Second, if large hit of IP...

The OWASP ModSecurity Core Rule Set (CRS) is a laid upwards of generic assault detection rules for role amongst ModSecurity or compatible spider web application firewalls. The CRS aims to protect spider web applications from a broad hit of attacks, including the OWASP Top Ten, amongst a minimum of faux alerts. The Core Rule Set provides protection against many mutual assault categories, including: SQL Injection (SQLi) Cross Site Scripting (XSS) Local File Inclusion (LFI) Remote File Inclusion (RFI) Remote Code Execution (RCE) PHP Code Injection HTTP Protocol Violations    HTTPoxy Shellshock Session Fixation Scanner Detection Metadata/Error Leakages Project Honey Pot Blacklist GeoIP Country Blocking New Features inward CRS 3 CRS three includes many coverage improvements, plus the next novel features: Over 90% reduction of faux alerts inward a default install A user-defined Paranoia Level to enable additional strict checks Application-specific...

Turbinia is an open-source framework for deploying, managing, as well as running distributed forensic workloads. It is intended to automate running of mutual forensic processing tools (i.e. Plaso, TSK, strings, etc) to attention amongst processing evidence inwards the Cloud, scaling the processing of large amounts of evidence, as well as decreasing reply fourth dimension yesteryear parallelizing processing where possible. How it works Turbinia is composed of dissimilar components for the client, server as well as the workers. These components tin dismiss live on run inwards the Cloud, on local machines, or as a hybrid of both. The Turbinia customer makes requests to procedure evidence to the Turbinia server. The Turbinia server creates logical jobs from these incoming user requests, which creates as well as schedules forensic processing tasks to live on run yesteryear the workers. The evidence to live on processed volition live on dissever upwards yesteryear the jobs when ...

PFQ is a functional framework designed for the Linux operating arrangement built for efficient packets capture/transmission (10G, 40G too beyond), in-kernel functional processing, kernel-bypass too packets steering across groups of sockets/end-points. It is highly optimized for multi-core architecture, equally good equally for network devices equipped amongst multiple hardware queues. Compliant amongst whatsoever NIC, it provides a script that generates accelerated network device drivers starting from the source code. PFQ enables the evolution of high-performance network applications, too it is shipped amongst a custom version of libpcap that accelerate too parallelize legacy applications. Besides, a pure functional linguistic communication designed for early on stages in-kernel package processing is included: pfq-lang. Pfq-Lang is inspired yesteryear Haskell too is intended to define applications that run on top of network device drivers. Through pfq-lang it is possible to ...

FFM is a hacking harness that y'all tin occupation during the post-exploitation stage of a red-teaming engagement. The see of the tool was derived from a 2007 conference from @thegrugq. It was presented at SSTIC 2018 as well as the accompanying slide deck is available at this url . If you're non familiar amongst this flat of tools, it is strongly advised to conduct maintain a seem at them to empathise what a hacking harness' role is. All the comments are included inwards the slides. Usage The goal of a hacking harness is to deed equally a helper that automates mutual tasks during the post-exploitation phase, but also safeguards the user against mistakes they may make. It is an instrumentation of the shell. Run ./ffm.py to activate it as well as y'all tin start working immediately. There are 2 commands y'all demand to know about: Type !list to display the commands provided past times the harness. Type SHIFT+TAB to perform tab completion on the loca...

Chinese W12scan is a network property discovery engine that tin move automatically aggregate related assets for analysis too use. Here is a spider web source program, simply the scanning cease is at w12scan-client Thinking Based on python3 + django + elasticsearch + redis too role the spider web restful api to add together scan targets. Feature Web Powerful search syntax Search for cms, service, titles, province regions, etc., to rapidly regain relevant targets. title=“abc” # Search from the title header=“abc” # Search from http header body=“123” # Search from trunk text url = “*.baidu.com” # Search for subdomains of baidu.com ip = ‘1.1.1.1’ # Search from IP,support '192.168.1.0/24' too '192.168.1.*' port = ‘80’ # Search shape port app = ’nginx’ # Search application country = ‘cn’ # Search from country service = ‘mysql’ # Search from service bug = 'xx' # Search from Vulnerability Custom assert By customizing a company-relate...