The Latest Infosec News, Tools, and Exploits – Got Root?
CloudBunny is a tool to capture the origin server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye. To […]
Overview LDAP_Search can be used to enumerate Users, Groups, Computers, Domain Policies, and Domain Trusts within a Windows environment. Authentication can be performed using traditional username and password, or NTLM hash. In addition, this tool […]
Jok3r is a Python3 CLI application which is aimed at helping penetration testers for network infrastructure and web black-box security tests. Its main goal is to save time on everything that can be automated during […]
Highlights: [*]A complete versatile framework to cover up everything from Reconnaissance to Vulnerability Analysis. [*]Has 5 main phases, subdivided into 14 sub-phases consisting a total of 108 modules. [*]Reconnaissance Phase has 50 modules of its […]
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing framework capable of performing static, dynamic and malware analysis. It can be used for effective and fast security analysis of Android, iOS and […]
GitDump dumps source code from website/.git directory when directory traversal is disabled. How it works: [su_quote] [*]Fetch all common files (.git/index, .git/HEAD, .git/ORIG_HEAD, etc.). [*]Find as many objects (sha1) as possible by analyzing .git/packed-refs, .git/index, […]
Wifiphisher is a rogue Access Point framework for conducting red team engagements or Wi-Fi security testing. Using Wifiphisher, penetration testers can easily achieve a man-in-the-middle position against wireless clients by performing targeted Wi-Fi association attacks. […]
Fluxion is a security auditing and social-engineering research tool. It is a remake of linset by vk496 with (hopefully) less bugs and more functionality. The script attempts to retrieve the WPA/WPA2 key from a target […]
SubScraper uses DNS brute force, Google & Bing scraping, and Virus Total to enumerate subdomains without an API. Written in Python3, SubScraper performs HTTP(S) requests and DNS “A” record lookups during the enumeration process to […]
Wifivoi is a ruby script for continuously jam all wifi clients and access points within range. The effectiveness of the script depends on your wireless card. Requirements: [su_quote] Ruby version 1.9.3 or higher. Wireless card […]
