sf

Janusec Application Gateway, an application safety solutions which provides WAF (Web Application Firewall), unified spider web direction portal, someone fundamental protection, spider web routing as well as scalable charge balancing. With Janusec, y'all tin ship away construct secure as well as scalable applications. Key Features WAF (Web Application Firewall), block SQL Injection, Cross-site Scripting, Sensitive Data Leakage, CC Attacks etc. Group Policy (Cooperation amongst Multiple Check Points) CAPTCHA support Unified Web Administration HTTPS support, No Agent Required. Certificate Protection amongst Private Key Encrypted Storage Scalable Architecture, Load Balance as well as Multiple Nodes Support Screenshots SQL Injection Screenshot Sensitive Data Leakage Screenshot Official Web Site https://www.janusec.com/ Detailed documentation is available at Janusec Application Gateway Documentation . Requirements PostgreSQL 9.3 9.6 or ten (Requi...

Malice's mission is to live a costless opened upwards source version of VirusTotal that anyone tin give notice role at whatever scale from an independent researcher to a fortune 500 company. Try It Out DEMO: demo.malice.io username : malice password : ecilam Requirements Hardware 16GB disk space 4GB RAM Software Docker Getting Started (OSX) Install $ brew install maliceio/tap/malice Usage: malice [OPTIONS] COMMAND [arg...] Open Source Malware Analysis Framework Version: 0.3.11 Author: blacktop - <https://github.com/blacktop> Options: --debug, -D Enable debug trend [$MALICE_DEBUG] --help, -h demo assistance --version, -v impress the version Commands: scan Scan a file lookout Watch a folder lookup Look upwards a file hash elk Start an ELK docker container plugin List, Install or Remove Plugins assistance Shows a listing of commands or assistance for i ascendancy Run ...

GoScan is an interactive network scanner client, featuring auto-completion, which provides abstraction as well as automation over nmap. Although it started every bit a modest side-project I developed inward companionship to larn @golang , GoScan tin instantly hold upwardly used to perform host discovery, port scanning, as well as service enumeration non alone inward situations where beingness stealthy is non a priority as well as fourth dimension is express (think at CTFs, OSCP, exams, etc.), but also (with a few tweaks inward its configuration) during professional person engagements. GoScan is also peculiarly suited for unstable environments (think unreliable network connectivity, lack of " screen ", etc.), given that it fires scans as well as hold their dry reason inward an SQLite database. Scans run inward the background (detached from the top dog thread), then fifty-fifty if connecter to the box running GoScan is lost, results tin hold upwardly uploaded asynch...

Goca is a FOCA fork written inwards Go, which is a tool used mainly to uncovering metadata as well as hidden information inwards the documents its scans. These documents may endure on spider web pages, as well as tin endure downloaded as well as analyzed alongside Goca . It is capable of analyzing a broad multifariousness of documents, alongside the virtually mutual beingness Microsoft Office, Open Office, or PDF files, although it also analyzes Adobe InDesign or SVG files, for instance. These documents are searched for using search engines such as: Google Bing DuckDuckGo Yahoo Ask Then downloads the documents as well as extracts the EXIF information from graphic files, as well as a consummate analysis of the information discovered through the URL is conducted fifty-fifty earlier downloading the file. USAGE Download built packages from Releases To cook from source, yous volition demand Go installed. $ export GO111MODULE=on $ become larn ./... $ become run go...

Vulnerability scanner for Linux/FreeBSD, agentless, written inwards golang. Twitter: @vuls_en DEMO Abstract For a arrangement administrator, having to perform safety vulnerability analysis as well as software update on a daily footing tin survive a burden. To avoid downtime inwards production environment, it is mutual for arrangement administrator to remove non to purpose the automatic update alternative provided past times packet managing director as well as to perform update manually. This leads to the next problems. System administrator volition convey to constantly lookout adult man out for whatsoever novel vulnerabilities inwards NVD(National Vulnerability Database) or like databases. It mightiness survive impossible for the arrangement administrator to monitor all the software if at that topographic point are a large number of software installed inwards server. It is expensive to perform analysis to decide the servers affected past times novel vulnerabi...

Decker is a penetration testing orchestration framework. It leverages HashiCorp Configuration Language 2 (the same config linguistic communication every bit Terraform ) to allow declarative penetration testing every bit code , too thus your tests tin hold upward versioned, shared, reused, too collaborated on amongst your squad or the community. Example of a decker config file: // variables are pulled from environs // ex: DECKER_TARGET_HOST // they volition hold upward available throughout the config files every bit var.* // ex: ${var.target_host} variable "target_host" { type = "string" } // resources refer to plugins // resources demand unique names too thus plugins tin hold upward used to a greater extent than than in 1 lawsuit // they are declared amongst the form: 'resource "plugin_name" "unique_name" {}' // their outputs volition hold upward available to others using the shape unique_name.* // ex: nmap.443 resourc...

GoScan is an interactive network scanner client, featuring auto-completion, which provides abstraction in addition to automation over nmap. Although it started every bit a small-scale side-project I developed inward lodge to larn @golang , GoScan tin lavatory straightaway live on used to perform host discovery, port scanning, in addition to service enumeration non solely inward situations where beingness stealthy is non a priority in addition to fourth dimension is express (think at CTFs, OSCP, exams, etc.), but also (with a few tweaks inward its configuration) during professional person engagements. GoScan is also peculiarly suited for unstable environments (think unreliable network connectivity, lack of " screen ", etc.), given that it fires scans in addition to keep their dry soil inward an SQLite database. Scans run inward the background (detached from the primary thread), in addition to then fifty-fifty if connectedness to the box running GoScan is lost, res...

flightsim is a lightweight utility used to generate malicious network traffic in addition to tending safety teams to evaluate safety controls in addition to network visibility. The tool performs tests to copy DNS tunneling, DGA traffic, requests to known active C2 destinations, in addition to other suspicious traffic patterns. Installation Download the latest flightsim binary for your OS from the GitHub Releases page. Alternatively, the utility tin privy hold upward built using Golang inwards whatever surroundings (e.g. Linux, MacOS, Windows), equally follows: go larn -u github.com/alphasoc/flightsim/... Running Network Flight Simulator Upon installation, examination flightsim equally follows: $ flightsim --help AlphaSOC Network Flight Simulator™ (https://github.com/alphasoc/flightsim) flightsim is an application which generates malicious network traffic for safety teams to evaluate safety controls (e.g. firewalls) in addition to ensure that monitoring tools are able ...

Hunt Open MongoDB instances! Features Worlds fastest too virtually efficient scanner ( Uses Masscan ). Scans entire cyberspace past times default, So burn downward the tool too chill. Hyper efficient - Uses Go-routines which are fifty-fifty lighter than threads. Pre-Requisites - Go linguistic communication ( sudo apt install golang ) Masscan ( sudo apt install masscan ) Tested on Ubuntu & Kali linux How to install too run - git clone https://github.com/yashpl/mongoBuster.git cd mongoBuster larn laid upwards mongobuster.go utils.go sudo ./mongobuster Note: Run it amongst sudo every bit Masscan requires sudo access. Flags - Flag Description --max-rate= (int) Defines maximum charge per unit of measurement at which packets are generated too sent. Default is 100. --out-file= (string) Name of file to which vulnerable IPs volition last exported. -v Display fault msgs from non-vulnerable servers NOTE - Using ridiculous values fo...

The OWASP Amass tool suite obtains subdomain names past times scraping information sources, recursive animate beingness forcing, crawling spider web archives, permuting/altering names as well as contrary DNS sweeping. Additionally, Amass uses the IP addresses obtained during resolution to notice associated netblocks as well as ASNs. All the information is as well as hence used to range maps of the target networks. Information Gathering Techniques Used: DNS: Basic enumeration, Brute forcing (upon request), Reverse DNS sweeping, Subdomain cite alterations/permutations, Zone transfers (upon request) Scraping: Ask, Baidu, Bing, CommonCrawl, DNSDB, DNSDumpster, DNSTable, Dogpile, Exalead, FindSubdomains, Google, IPv4Info, Netcraft, PTRArchive, Riddler, SiteDossier, ThreatCrowd, VirusTotal, Yahoo Certificates: Active pulls (upon request), Censys, CertDB, CertSpotter, Crtsh, Entrust APIs: BinaryEdge, BufferOver, CIRCL, HackerTarget, PassiveTotal, Robtex, SecurityTrails, Shodan...