The Latest Infosec News, Tools, and Exploits – Got Root?
Detailed Description about this can be found here : Read Blog here : https://medium.com/@Asm0d3us/weaponizing-favicon-ico-for-bugbounties-osint-and-what-not-ace3c214e139 Introduction I have created this tool for making my work easier when it comes to recon using Favicon hashes, it takes […]
SecretFinder is a python script based on LinkFinder, written to discover sensitive data like apikeys, accesstoken, authorizations, jwt,..etc in JavaScript files. It does so by using jsbeautifier for python in combination with a fairly large […]
Example Installation First of all, clone the repo locally git clone https://github.com/edoardottt/scilla.git Scilla has external dependencies, so they need to be pulled in: go get Linux (Requires high perms, run with sudo) make linux make […]
Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing advanced automated reconnaissance (framework). This tool can also be used for OSINT (Open-source intelligence) activities. Features ! For recent time, Sudomy has […]
Setup git clone https://github.com/Skiller9090/Lucifer.git cd Lucifer pip install -r requirements.txt python main.py –help If you want the cutting edge changes add -b dev to the end of git clone https://github.com/Skiller9090/Lucifer.git Commands Command Description help Displays […]
OWASP Juice Shop is probably the most modern and sophisticated insecure web application! It can be used in security trainings, awareness demos, CTFs and as a guinea pig for security tools! Juice Shop encompasses vulnerabilities […]
Cracking password hashes on your own without the proper hardware can become time-consuming and tedious. Luckily for those capped by their hardware, a variety of free sites have arisen over the years. https://crackstation.net/ – They […]
Powerful Chromium Browser to find XSS Vulnerabilities automatically while browsing web, it can detect many case scenarios with support for POST requests too Installation Usage Just browse the web like a normal web browser then […]
Metasploit custom modules, plugins, resource script and.. awesome metasploit collectionhttps://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework config your metasploit-framework directory $metasploit_path = ‘/opt/metasploit-framework/embedded/framework/’ # /usr/share/metasploit-framework 2-A. Interactive Mode 2-B. Commandline Mode(preset all) Use […]
An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters. Requirements: Go Language, Python 2.7 or Python 3. System requirements: Recommended to run on vps […]
