The Latest Infosec News, Tools, and Exploits – Got Root?
Kaboom is a bash script that automates the first two phases of a penetration test. All informations collected are saved into a directory hierarchy very simple to browser (also in the case of multiple targets). […]
Archery is an opensource vulnerability assessment and management tool which helps developers and pentesters to perform scans and manage vulnerabilities. Archery uses popular opensource tools to perform comprehensive scanning for web application and network. It […]
Jok3r is a Python3 CLI application which is aimed at helping penetration testers for network infrastructure and web black-box security tests. Its main goal is to save time on everything that can be automated during […]
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing framework capable of performing static, dynamic and malware analysis. It can be used for effective and fast security analysis of Android, iOS and […]
GitDump dumps source code from website/.git directory when directory traversal is disabled. How it works: [su_quote] [*]Fetch all common files (.git/index, .git/HEAD, .git/ORIG_HEAD, etc.). [*]Find as many objects (sha1) as possible by analyzing .git/packed-refs, .git/index, […]
Wifiphisher is a rogue Access Point framework for conducting red team engagements or Wi-Fi security testing. Using Wifiphisher, penetration testers can easily achieve a man-in-the-middle position against wireless clients by performing targeted Wi-Fi association attacks. […]
SubScraper uses DNS brute force, Google & Bing scraping, and Virus Total to enumerate subdomains without an API. Written in Python3, SubScraper performs HTTP(S) requests and DNS “A” record lookups during the enumeration process to […]
WiFiBroot is built to provide clients all-in-one facility for cracking WiFi (WPA/WPA2) networks. It heavily depends on scapy, a well-featured packet manipulation library in Python. Almost every process within is dependent somehow on scapy layers […]
Features: Web Pentest [*]Banner Grab [*]Whois [*]Traceroute [*]DNS Record [*]Reverse DNS Lookup [*]Zone Transfer Lookup [*]Port Scan [*]Admin Panel Scan [*]Subdomain Scan [*]CMS Identify [*]Reverse IP Lookup [*]Subnet Lookup [*]Extract Page Links Generator [*]Deface Page […]
Subjack is a Hostile Subdomain Takeover tool written in Go designed to scan a list of subdomains concurrently and identify ones that are able to be hijacked. With Go’s speed and efficiency, this tool really […]
