Xssizer - The Best Tool To Find And Prove XSS Flaws
According to WikiPediaCross-site scripting is a type of computer security vulnerability typically found in web applications. XSS enables attackers to inject client-side scripts into web pages viewed by...
View ArticleBuster - Find Emails Of A Person And Return Info Associated With Them
Buster is a simple OSINT tool used to:Get social accounts from various sources(gravatar,about.me,myspace,skype,github,linkedin,avast)Get links to where the email was found using...
View ArticleSlurp - S3 Bucket Enumerator
Blackbox/whitebox S3 bucket enumeratorOverviewCredit to all the vendor packages that made this tool possible.This is a security tool; it's meant for pen-testers and security professionals to perform...
View ArticleParrot Security 4.7 - Security GNU/Linux Distribution Designed with Cloud...
Parrot is a GNU/Linux distribution based on Debian Testing and designed with Security, Development and Privacy in mind.It includes a full portable laboratory for security and digital forensics experts,...
View ArticleXSpear - Powerfull XSS Scanning And Parameter Analysis Tool
XSpear is XSS Scanner on ruby gems.Key featuresPattern matching based XSS scanningDetect alertconfirmprompt event on headless browser (with Selenium)Testing request/response for XSS protection bypass...
View ArticleW13Scan - Passive Security Scanner
W13scan is a proxy-based web scanner that runs on Linux/Windows/Mac systems.BeginDemoPure Python and Python version >= 3Can you use star to encourage the author ?Installpip3 install w13scanUsage##...
View ArticleMSNM-S - Multivariate Statistical Network Monitoring-Sensor
MSNM-S (Multivariate Statistical Network Monitoring-Sensor) shows the practical suitability of the approaches found in PCA-MSNM and in Hierarchical PCA-MSNM works. The first one present the MSNM...
View ArticleUsbrip - Simple Command Line Forensics Tool For Tracking USB Device Artifacts...
usbrip (derived from "USB Ripper", not "USB R.I.P.") is an open source forensics tool with CLI interface that lets you keep track of USB device artifacts (aka USB event history, "Connected" and...
View ArticleMemGuard - Secure Software Enclave For Storage Of Sensitive Information In...
Secure software enclave for storage of sensitive information in memory.This package attempts to reduce the likelihood of sensitive data being exposed. It supports all major operating systems and is...
View ArticleHELK - The Hunting ELK
The Hunting ELK or simply the HELK is one of the first open source hunt platforms with advanced analytics capabilities such as SQL declarative language, graphing, structured streaming, and even machine...
View ArticleWiFiBroot - A WiFi Pentest Cracking Tool For WPA/WPA2 (Handshake, PMKID,...
WiFiBroot is built to provide clients all-in-one facility for cracking WiFi (WPA/WPA2) networks. It heavily depends on scapy, a well-featured packet manipulation library in Python. Almost every process...
View ArticleAutoRecon - Multi-Threaded Network Reconnaissance Tool Which Performs...
AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services. It is intended as a time-saving tool for use in CTFs and other penetration testing...
View ArticleMalcolm - A Powerful, Easily Deployable Network Traffic Analysis Tool Suite...
Malcolm is a powerful network traffic analysis tool suite designed with the following goals in mind:Easy to use– Malcolm accepts network traffic data in the form of full packet capture (PCAP) files and...
View ArticleTheo - Ethereum Recon And Exploitation Tool
Theo aims to be an exploitation framework and a blockchain recon and interaction tool.Features:Automatic smart contract scanning which generates a list of possible exploits.Sending transactions to...
View ArticleProject iKy v2.1.0 - Tool That Collects Information From An Email And Shows...
Project iKy is a tool that collects information from an email and shows results in a nice visual interface.Visit the Gitlab Page of the ProjectProjectFirst of all we want to advice you that we have...
View ArticleSET v8.0.1 - The Social-Engineer Toolkit
Copyright 2019 The Social-Engineer Toolkit (SET)Written by: David Kennedy (ReL1K)Company: TrustedSecDISCLAIMER: This is only for testing purposes and can only be used where strict consent has been...
View ArticleKRF - A Kernelspace Randomized Faulter
KRF is a Kernelspace Randomized Faulter.It currently supports the Linux and FreeBSD kernels.What?Fault injection is a software testing technique that involves inducing failures ("faults") in the...
View ArticleSkadi - Collect, Process, And Hunt With Host Based Data From MacOS, Windows,...
(pronounced “SKAH-Dee”: similar to Scotty but with a d sound) is a giantess and goddess of hunting in Norse mythologyPurposeSkadi is a free, open source collection of tools that enables the collection,...
View ArticleCommando VM v2.0 - The First Full Windows-based Penetration Testing Virtual...
Welcome to CommandoVM - a fully customizable, Windows-based security distribution for penetration testing and red teaming.For detailed install instructions or more information please see our...
View ArticleSQLMap v1.3.8 - Automatic SQL Injection And Database Takeover Tool
SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection...
View Article