sf

Pacu is an opened upwards source AWS exploitation framework, designed for offensive safety testing against cloud environments. Created as well as maintained yesteryear Rhino Security Labs, Pacu allows penetration testers to exploit configuration flaws inside an AWS account, using modules to easily expand its functionality. Current modules enable a arrive at of attacks, including user privilege escalation, backdooring of IAM users, attacking vulnerable Lambda functions, as well as much more. Installation Pacu is a fairly lightweight program, equally it requires only Python3.5+ as well as pip3 to install a handful of Python libraries. Running install.sh volition banking corporation fit your Python version as well as ensure all Python packages are upwards to date. Quick Installation > git clone https://github.com/RhinoSecurityLabs/pacu > cd pacu > bash install.sh > python3 pacu.py For a to a greater extent than detailed as well as user-friendly laid of use...

LightBulb is an opened upwards source python framework for auditing spider web application firewalls as well as filters. Synopsis The framework consists of ii top dog algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata inwards the measure membership/equivalence inquiry model. Active learning algorithms permits the analysis of filter as well as sanitizer programs remotely, i.e. given simply the mightiness to inquiry the targeted plan as well as honour the output. SFADiff : Influenza A virus subtype H5N1 black-box differential testing algorithm based on Symbolic Finite Automata (SFA) learning Finding differences betwixt programs alongside similar functionality is an of import safety work every bit such differences tin live on used for fingerprinting or creating evasion attacks against safety software similar Web Application Firewalls (WAFs) which are designed to give away malicious inputs to spider web applications. Motivati...

DevAudit is an open-source, cross-platform, multi-purpose safety auditing tool targeted at developers together with teams adopting DevOps together with DevSecOps that detects safety vulnerabilities at multiple levels of the solution stack. DevAudit provides a broad array of auditing capabilities that automate safety practices together with implementation of safety auditing inwards the software evolution life-cycle. DevAudit tin scan your operating organization together with application packet dependencies, application together with application server configurations, together with application code, for potential vulnerabilities based on information aggregated yesteryear providers similar OSS Index together with Vulners from a broad array of sources together with information feeds such every bit the National Vulnerability Database (NVD) CVE information feed, the Debian Security Advisories information feed, Drupal Security Advisories, together with many others. DevAudit helps...

Kube-hunter hunts for safety weaknesses inwards Kubernetes clusters. The tool was developed to growth awareness as well as visibility for safety issues inwards Kubernetes environments. You should NOT run kube-hunter on a Kubernetes cluster yous don't own! Run kube-hunter : kube-hunter is available equally a container (aquasec/kube-hunter), as well as nosotros also offering a spider web site at kube-hunter.aquasec.com where yous tin register online to have a token allowing yous run across as well as portion the results online. You tin also run the Python code yourself equally described below. Contribute : We welcome contributions, specially novel hunter modules that perform additional tests. If yous would similar to railroad train your ain modules delight read Guidelines For Developing Your First kube-hunter Module . Hunting Where should I run kube-hunter? Run kube-hunter on whatever auto (including your laptop), conduct Remote scanning as well as give the IP address ...

Snyk helps you lot find, ready as well as monitor known vulnerabilities inward Node.js npm, Ruby as well as Java dependencies, both on an advertizement hoc footing as well as equally purpose of your CI (Build) system. Documentation Full documentation is available on snyk.io Installation Install the Snyk utility using npm install -g snyk . Once installed you lot volition postulate to authenticate alongside your Snyk account: snyk auth For to a greater extent than especial on how to authenticate accept a expect at the CLI authentication department of the Snyk documentation. CLI snyk [options] [command] [package] Run snyk --help to larn a quick overview of all commands or for amount details on the CLI read the snyk.io CLI docs . The bundle declaration is optional. If no bundle is given, Snyk volition run the dominance against the electrical flow working directory allowing you lot attempt you lot non-public applications. Features Find known vulnerabilities yes...

Commix (short for [ comm ]and [ i ]njection e[ x ]ploiter) is an automated tool written past times Anastasios Stasinopoulos ( @ancst ) that tin hold upwards used from spider web developers, penetration testers or fifty-fifty safety researchers inward club to seek web-based applications amongst the thought to honor bugs, errors or vulnerabilities related to command injection attacks. By using this tool, it is real slow to honor as well as exploit a command injection vulnerability inward a surely vulnerable parameter or HTTP header. Requirements Python version 2.6.x or 2.7.x is required for running this program. Installation Download commix past times cloning the Git repository: git clone https://github.com/commixproject/commix.git commix Commix comes packaged on the official repositories of the next Linux distributions, as well as hence y'all tin role the package manager to install it! ArchStrike BlackArch Linux BackBox Kali Linux Parrot Security OS Wea...