Collaborate Disseminate
GetAltName it’s a little script to discover sub-domains that can extract Subject Alt Names for SSL Certificates directly from HTTPS websites which can provide you with DNS names or virtual servers.
It’s useful in a discovery phase of a pen-testing ass… Continue reading GetAltName – Discover Sub-Domains From SSL Certificates
Memcrashed is a Memcached DDoS exploit tool written in Python that allows you to send forged UDP packets to a list of Memcached servers obtained from Shodan.
This is related to the recent record-breaking Memcached DDoS attacks that are likely to plagu… Continue reading Memcrashed – Memcached DDoS Exploit Tool
QualysGuard is a web-based vulnerability management tool provided by Qualys, Inc, which was the first company to deliver vulnerability management services as a SaaS-based web-service.
From reviews, it seems like a competent tool with a low rate of fal… Continue reading QualysGuard – Vulnerability Management Tool
So after the massive DDoS attack trend in 2016 it seems like 2018 is going to the year of the Memcached DDoS amplification attack with so many insecure Memcached servers available on the public Internet.
Unfortunately, it looks like a problem that won… Continue reading Memcached DDoS Attacks Will Be BIG In 2018
Sodium is a new, easy-to-use software library for encryption, decryption, signatures, password hashing and more. It is a portable, cross-compilable, installable, packageable fork of NaCl, with a compatible API, and an extended API to improve usability … Continue reading libsodium – Easy-to-use Software Library For Encryption
XSStrike is an advanced XSS detection suite, which contains a powerful XSS fuzzer and provides zero false positive results using fuzzy matching. XSStrike is the first XSS scanner to generate its own payloads.
It is also built in an intelligent enough … Continue reading XSStrike – Advanced XSS Fuzzer & Exploitation Suite
The latest ransomware kicking everyone’s ass is Gandcrab which has infected an estimated 50,000 computers, fortunately for the victims, Bitdefender has released a free Gandcrab ransomware decryption tool as a part of the No More Ransom Project.
There’… Continue reading Bitdefender Releases FREE GandCrab Ransomware Decryption Tool
Quickjack is an intuitive, point-and-click tool for performing advanced and covert clickjacking and frame slicing attacks. It also allows you to easily perform clickjacking, or steal “clicks” from users on many websites, forcing the user to unknowingly… Continue reading Quickjack – Advanced Clickjacking & Frame Slicing Attack Tool
Quickjack is an intuitive, point-and-click tool for performing advanced and covert clickjacking and frame slicing attacks. It also allows you to easily perform clickjacking, or steal “clicks” from users on many websites, forcing the user to unknowingly… Continue reading Quickjack – Advanced Clickjacking & Frame Slicing Attack Tool
BootStomp is a Python-based tool, with Docker support that helps you find two different classes of Android bootloader vulnerabilities and bugs. It looks for memory corruption and state storage vulnerabilities.
Note that BootStomp works with boot-load… Continue reading BootStomp – Find Android Bootloader Vulnerabilities