Archives Cyber

Cari Blog Ini

Hapus NamaKu - Lada Serui

pada tanggal Desember 17, 2017

Dapatkan link
Facebook
X
Pinterest
Email
Aplikasi Lainnya

video

Dapatkan link
Facebook
X
Pinterest
Email
Aplikasi Lainnya

Komentar

Posting Komentar

Postingan Populer

GyoiThon: Next Generation Penetration Testing Tool Using Machine Learning

GyoiThon is a Growing Penetration Testing Tool Using Machine Learning. GyoiThon identifies the software installed on web server (OS, Middleware, Framework, CMS, etc...) based on the learning data. After that, it executes valid exploits for the identified software using Metasploit. Finally, it generates reports of scan results. GyoiThon executes the above processing automatically. Processing steps GyoiThon executes the above "Step1" - "Step4" fully automatically. User's only operation is to input the top URL of the target web server in GyoiThon. It is very easy! You can identify vulnerabilities of the web servers without taking time and effort. Processing flow Step 1. Gather HTTP responses. GyoiThon gathers several HTTP responses of target website while crawling. The following are example of HTTP responses gathered by GyoiThon. Example 1 HTTP/1.1 200 OK Date: Tue, 06 Mar 2018 03:01:57 GMT Connection: close Content-Type: text/html; charset=UTF-8 Etag: "409e...

RetireJS: A Scanner Detecting The Use of JavaScript Libraries With Known Vulnerabilities

RetireJS: A Scanner Detecting The Use of JavaScript Libraries With Known Vulnerabilities What you require you must also retire? There is a plethora of JavaScript libraries for use on the Web and in Node.JS apps out there. This greatly simplifies development,but we need to stay up-to-date on security fixes. "Using Components with Known Vulnerabilities" is now a part of the OWASP Top 10 list of security risks and insecure libraries can pose a huge risk to your Web app. The goal of Retire.js is to help you detect the use of JS-library versions with known vulnerabilities. Retire.js can be used in many ways: As command line scanner As a grunt plugin As a gulp task As a Chrome extension As a Firefox extension As a Burp and OWASP Zap plugin Command line scanner Scan a web app or node app for use of vulnerable JavaScript libraries and/or Node.JS modules. In the source code folder of the application folder run: $ npm install -g retire $ retire Grunt plugin A Grunt task for running Ret...

BeRoot- A Post Exploitation Tool To Check Common Misconfigurations For Windows Linux And Mac OS

BeRoot- A Post Exploitation Tool To Check Common Misconfigurations For Windows Linux And Mac OS A compiled version is available here . It will be added to the pupy project as a post exploitation module (so it will be executed in memory without touching the disk). Except one method, this tool is only used to detect and not to exploit. If something is found, templates could be used to exploit it. To use it, just create a test.bat file located next to the service / DLL used. It should execute it once called. Depending on the Redistributable Packages installed on the target host, these binaries may not work. Check the Following: BeRoot For Windows BeRoot For Linux BeRoot For Windows To Check Common Windows Misconfigurations Run it |=================================================== | ...

Diberdayakan oleh Blogger