Vulnerability Scanner
A web application vulnerability scanner is an expertly crafted software program, engineered to methodically scan web applications for security vulnerabilities. It operates with precision, simulating attacks and meticulously observing the application's response to pinpoint potential weak points with absolute certainty. The scanner isn't just helpful, it&
Cybersecurity
RapidScan is a free and open-source multi-tool web app vulnerability scanner, that allows pentesters, web developers and ethical hackers looks for bugs, and security issues in any web app. It is written using Python and can be installed on any system either from source using Python or using Docker. Features
Cybersecurity
Safety CLI is a Python dependency vulnerability scanner that enhances software supply chain security. It detects packages with known vulnerabilities and malicious packages in various environments, providing clear remediation recommendations. It leverages a comprehensive database of vulnerabilities and malicious packages, allowing teams to detect vulnerabilities throughout the software development lifecycle.
Artificial Intelligence (AI)
What are cyber security payloads? In cybersecurity, a payload refers to the part of the malicious code that performs the harmful action; this could range from stealing data to damaging systems. For penetration testers, payloads are used in a controlled and ethical manner to probe system vulnerabilities and validate defenses.
Open Source Intelligence (OSINT)
Alfred is a user-friendly tool designed to discover usernames across various websites, similar to Sherlock. It is successful about 80% of the time and was created to assist new programmers or pentesters in the field of OSINT. Alfred, a tool with a 90% success rate, has gained attention in the
Open Source Intelligence (OSINT)
H4X-Tools is a toolkit designed for web scraping and Open Source Intelligence (OSINT). It includes a variety of tools for tasks such as scraping information from Instagram accounts, performing web searches, and many more. Features * Web scraping * Open Source Intelligence (OSINT) * Scraping information from Instagram accounts * Performing web searches * Looking
Open-source
What is an open-source intelligence? Open Source Intelligence (OSINT) for social media involves collecting and analyzing public data from platforms like Facebook, Twitter, and Instagram. It's valuable in cybercrime investigation, market research, brand management, personal safety, online reputation, journalism, disaster management, and security and defense. 1- SpyScrap SpyScrap
Cybersecurity
What is a Network Port Scanner? A network port scanner is a tool used by network security professionals and penetration testers to scan computer networks for open ports. Ports are communication endpoints that enable computers to send and receive data. A port scanner identifies which ports on a network are
Open Source Intelligence (OSINT)
H4X-Tools is a comprehensive, user-friendly, and highly versatile software toolkit that provides a wide range of powerful features. It is designed to facilitate various tasks such as web scraping, OSINT (Open Source Intelligence), and much more. With H4X-Tools, users can effortlessly gather and analyze data from different sources, making it
Cybersecurity
What is a DDoS (Distributed Denial of Service) attack? A DDoS (Distributed Denial of Service) attack is a malicious attempt to disrupt the regular functioning of a network, service, or website by overwhelming it with a flood of internet traffic. This flood of traffic is generated by multiple compromised devices,
Cybersecurity
The WebHackersWeapons project is a comprehensive collection of tools and resources for web hackers. It aims to provide a wide range of tools and features that can be utilized for various purposes in ethical hacking and web security testing. Features * The project includes a wide range of tools and features
Vulnerability Scanner
Raccoon is an open-source free OSINT high performance offensive security tool for reconnaissance and vulnerability scanning. Raccoon is a tool made for reconnaissance and information gathering with an emphasis on simplicity. It will do everything from fetching DNS records, retrieving WHOIS information, obtaining TLS data, detecting WAF presence and up
Vulnerability Scanner
BBOT (Bighuge BLS OSINT Tool) is a modular, recursive OSINT framework that can execute the entire OSINT workflow in a single command. BBOT is inspired by Spiderfoot but takes it to the next level with features like multi-target scans, lightning-fast asyncio performance, and NLP-powered subdomain mutations. It offers a wide
Vulnerability Scanner
Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications. It is smart, it trains itself by monitoring and learning from the web application's behavior during the scan process and is able to perform meta-analysis using a
pentesting
w3af is an open source web application security scanner which helps developers and penetration testers identify and exploit vulnerabilities in their web applications. The scanner is able to identify 200+ vulnerabilities, including Cross-Site Scripting, SQL injection and OS commanding. Features * User-friendly * Command-line interface * GUI app * Extenisable with plugins * Dozens of
Vulnerability Scanner
WhatWeb identifies websites. Its goal is to answer the question, "What is that Website?". WhatWeb recognises web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 1800 plugins, each to recognise something different. WhatWeb also identifies
Cybersecurity
WebDeets Is A Network Utility App That Is Used For Network Diagnostics And Troubleshooting.
Cybersecurity
This utility efficiently scans IP addresses and gathers host names and MAC addresses. It offers the capability to export scan results and includes features for port scanning of selected hosts. Enhanced with a multithreaded framework, the tool delivers increased speed, supporting functionalities like trigger actions and banner grabbing during port
Linux
Network Security Toolkit (NST) is a bootable ISO image (Live USB Flash Drive) based on Fedora 38 providing easy access to best-of-breed Open Source Network Security Applications and should run on most x86_64 systems. The main intent of developing this toolkit was to provide the security professional and network
pentesting
The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing operations: * exploits - modules that take advantage of identified vulnerabilities * creds - modules designed to test credentials against network services * scanners - modules that check if a target is
Cybersecurity
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine is your go-to web application reconnaissance suite that's designed to
Cybersecurity
Scanners Box also known as scanbox, is a powerful hacker toolkit, which has collected more than 10 categories of open source scanners from Github, including subdomain, database, middleware and other modular design scanner etc. But for other Well-known scanning tools, such as nmap, w3af, brakeman, arachni, nikto, metasploit, aircrack-ng will
Cybersecurity
Gobuster is a tool used to brute-force. This project is born out of the necessity to have something that didn't have a fat Java GUI (console FTW), something that did not do recursive brute force, something that allowed me to brute force folders and multiple extensions at once,
مقالات بالعربية - نسختنا العربية
ما هو الإختراق الأخلاقى؟ الاختراق الأخلاقي هو عملية اختبار أمنية تهدف إلى تحديد ثغرات الأمن في أنظمة المعلومات وتطبيقات الويب والشبكات بطرق قانونية وبموافقة صاحب النظام أو المؤسسة. يتم القيام بهذا النوع من الاختبارات بغرض تحسين الأمان وتقوية الحماية ضد الهجمات الحقيقية من قبل المهاجمين غير المصرح لهم. يتم تنفيذ