Installation: Installing WPHardening requires you to execute one console command: $ pip install -r requirements.txt Usage: $ python wphardening.py -h __ _______ _ _ _ _ \ \ / / __ \| | | | | | (_) \ \ /\ / /| |__) | |__| | __ _ _…
-
-
Weevely3 – Weaponized PHP Web Shell
Weevely is a command line web shell dynamically extended over the network at runtime designed for remote administration and pen testing. It provides a weaponized telnet-like console through a PHP script running on the target, even in restricted environments. The low footprint agent and over 30 modules shape an extensible…
-
Sn1per – Automated Pentest Recon Scanner
Sn1per is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. Features Automatically collects basic recon (ie. whois, ping, DNS, etc.) Automatically launches Google hacking queries against a target domain Automatically enumerates open ports Automatically brute forces sub-domains and DNS info Automatically…
-
Web Security Dojo – Stand-alone Training Environment for Web Application Security
Web Security Dojo is a preconfigured, stand-alone training environment for Web Application Security. Virtualbox and VMware versions for download. See “View all files” for VMware version. Features: Ethical hacking sandbox Pre-configured vulnerable targets Common web hacking tools Training materials and user guides for some targets What is Web Security…
-
BruteX – Automatically Brute Force all services running on a Target
BruteX – Automatically brute force all services running on a target Open ports DNS domains Web files Web directories Usernames Passwords DEPENDENCIES: NMap Hydra Wfuzz SNMPWalk DNSDict To brute force multiple hosts, use brutex-massscan and include the IP’s/hostnames to scan in the targets.txt file. USAGE: ./brutex target Download…
-
How to Patch VENOM Vulnerability [CVE-2015-3456] on Linux
Recently a new vulnerability known as VENOM discover by Jason GeFFner a buffer overflow vulnerability affecting the Floppy Disk Controller emulation and this bug FDC mostly affected are virtualization platforms and applications including KVM,, Virtualbox ,Xen and native QEMU client What is the VENOM security bug (CVE-2015-3456)? An out-of-bounds memory access…
-
XSSYA – Cross Site Scripting Scanner & Vulnerability Confirmation
XSSYA is a Cross Site Scripting Scanner & Vulnerability Confirmation that is working in two methods. Method number 1 for Confirmation Request and Response Method number 2 for Confirmation Execute encoded payload and search for the same payload in web HTML code but decoded What is Cross-site scripting (XSS) is…
-
Lynis – Security Auditing Tool for Unix/Linux
Lynis is a security auditing tool for Unix and Linux based systems. It performs in-depth security scans, with almost no configuration, This tool commonly used by network administrator/system admin, security professionals and pentester/auditor to evaluate linux/unix system. Requirements: Shell and basic utilities Permissions: Root permissions or normal user Operating System Supported:…