Posts

Showing posts with the label Security Audit

Dawnscanner - Dawn Is A Static Analysis Safety Scanner For Cherry-Red Written Spider Web Applications (Sinatra, Padrino In Addition To Ror Frameworks)

Image
dawnscanner is a source code scanner designed to review your ruby code for safety issues. dawnscanner is able to scan manifestly ruby scripts (e.g. command trace applications) but all its features are unleashed when dealing amongst spider web applications source code. dawnscanner is able to scan major MVC (Model View Controller) frameworks, out of the box: Ruby on Rails Sinatra Padrino Quick update from November, 2018 As yous tin run into dawnscanner is on concord since to a greater extent than together with thus an year. Sorry for that. It's life. I was overwhelmed past times tons of materials together with I dedicated gratis fourth dimension to Offensive Security certifications. True to hold out told, I'm starting OSCE journeying truly soon. The dawnscanner projection volition hold out updated shortly amongst novel safety checks together with kickstarted again. Paolo dawnscanner version 1.6.6 has 235 safety checks loaded inwards its cognition base. M...

Sqliscanner - Automatic Sql Injection Alongside Charles In Addition To Sqlmap Api

Image
Automatic SQL injection alongside Charles as well as sqlmapapi Dependencies Django PostgreSQL Celery sqlmap redis Supported platforms Linux osx Installation Preferably, y'all tin laissez passer the axe download SQLiScanner past times cloning the Git repository: git clone https://github.com/0xbug/SQLiScanner.git --depth 1 You tin laissez passer the axe download sqlmap past times cloning the Git repository: git clone https://github.com/sqlmapproject/sqlmap.git --depth 1 SQLiScanner plant alongside Python version 3.x on Linux as well as osx. Create virtualenv as well as install requirements cd SQLiScanner/ virtualenv --python=/usr/local/bin/python3.5 venv source venv/bin/activate pip install -r requirements.txt Setting DATABASES Setting SQLiScanner/settings.py:85 DATABASES = { 'default': { 'ENGINE': 'django.db.backends.postgresql', 'NAME': '', 'USER': '', ...

Sn0int - Semi-Automatic Osint Framework Together With Bundle Manager

Image
sn0int is a semi-automatic OSINT framework together with parcel manager. It was built for information technology safety professionals together with põrnikas hunters to assemble intelligence close a given target or close yourself. sn0int is enumerating assail surface past times semi-automatically processing world information together with mapping the results inward a unified format for followup investigations. Among other things, sn0int is currently able to: Harvest subdomains from certificate transparency logs Harvest subdomains from diverse passive dns logs Sift through subdomain results for publicly accessible websites Harvest emails from pgp keyservers Enrich ip addresses alongside ASN together with geoip info Harvest subdomains from the wayback machine Gather information close phonenumbers Bruteforce interesting urls sn0int is heavily inspired past times recon-ng together with maltego, but remains to a greater extent than flexible together with is fully opensource...

Cat-Nip - Automated Basic Pentest Tool (Designed For Kali Linux)

Image
Cat-Nip Automated Basic Pentest Tool this tool volition brand your basic pentesting chore similar Information Gathering, Auditing, And Reporting then this tool volition create every chore fully automatic. Usage Guide Download / Clone Cat-Nip # git clone https://github.com/baguswiratmaadi/catnip Go Inside Cat-Nip Dir # cd catnip Give Permission To Cat-Nip # chmod 777 catnip.sh Run Cat-Nip # ./catnip.sh Changelog 1.0 First Release Pentest Tools Auto Executed With Cat-Nip Whois Lookup DNSmap Nmap Dmitry Theharvester Load Balancing Detector SSLyze Automater Ua Tester Gobuster Grabber Parsero Uniscan And More Tool Soon Screenshot this is preview Cat-Nip Tools Preview Output Result Report In HTML Disclaimer Do non scan regime as well as person information technology objects without legal permission. Do At Your Own Risk Download Catnip

Recont - Reconnaisance / Footprinting / Data Disclosure

Image
Recon-Tool made for reconnaissance as well as information gathering amongst an emphasis on simplicity. It volition create everything from. Features Information Security Headers WAF Detector Banner Grabbing Phone Number Credit Card Number Email US Social Security Number Url Crawl Dom Paramter Url Internal Dynamic Paramter External Dynamic Paramter Internal Link External Link Port Scanner Subdomain Enumeration Requirements click requests colorlog bs4 tldextract Usage & Installation $ apt-get install python3 nmap $ pip3 install -r requirements.txt $ python3 reconT.py http://target.co.li $ python reconT.py --help Usage: reconT.py [OPTIONS] TARGET Options: --timeout INTEGER Seconds to expression earlier timeout connections --proxy TEXT if Use a proxy ex: 0.0.0.0:8888if amongst auth 0.0.0.0:8888@user:password --cookies TEXT if role cookie comma separated cookies to add together the req...

Recsech - Tool For Doing Footprinting Together With Reconnaissance On The Target Web

Image
Recsech is a tool for doing Footprinting together with Reconnaissance on the target web. Recsech collects information such every bit DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github together with much to a greater extent than yous tin run into inwards Features inwards tools . Features inwards tools Name Release Release Date Auto asking alongside Proxy yes 01/05/19 Find Email yes 01/05/19 HoneySpot Detected yes 01/05/19 Subdomain takeover yes 01/05/19 Check Technologies yes 01/05/19 Whois no N/A Crlf injection no N/A Header Security yes 01/05/19 Update Check yes 01/05/19 Port Scanner yes 02/05/19 Sort Domain By IP yes 02/05/19 Wordpress audit no N/A Reconnaissance On Github yes 02/05/19 Language Selection yes 02/05/19 WAF yes 03/05/19 Requirements for using this tool We ask several...

0Xsp Mongoose V1.7 - Linux/Windows Privilege Escalation Intelligent Enumeration Toolkit

Image
Using 0xsp mongoose y'all volition endure able to scan targeted operating arrangement for whatever possible agency for privilege escalation attacks, starting from collecting information phase until reporting information through 0xsp Web Application API. user volition endure able to scan dissimilar Linux / windows Operation systems at the same fourth dimension alongside high performance, without spending fourth dimension looking within the finally or text file for what is found, mongoose shortens this agency past times allowing y'all to post this information straight into spider web application friendly interface through tardily API endpoint. projection is divided into 2 sections server & agent . server has been coded alongside PHP( codeigniter ) y'all demand to install this application into your preferred environment, y'all tin utilization it online or on your localhost. user is costless to alternative .also contribution to enhancing features are most welc...