Archive | Web Hacking

OWASP VBScan – vBulletin Vulnerability Scanner

January 28, 2017 | 794 views 0

OWASP VBScan short for vBulletin Vulnerability Scanner is an open-source project in Perl programming language to detect VBulletin CMS vulnerabilities and analyse them. Features VBScan currently has the following: Compatible with Windows, Linux & OSX Up to date exploit database Full path disclosure Firewall detect & bypass Version check Upgrade config finder Random user agent […]

Tags: perl, vb security, vbscan, vbulletin exploit scanner, vbulletin exploits, vbulletin security, vbulletin security scanner, vBulletin vulnerability

Posted in: Exploits/Vulnerabilities, Hacking Tools, Web Hacking | Add a Comment

DAVScan – WebDAV Security Scanner

January 2, 2017 | 1,067 views 0

DAVScan is a quick and lightweight WebDAV security scanner designed to discover hidden files and folders on DAV enabled web servers. The scanner works by taking advantage of overly privileged/misconfigured WebDAV servers or servers vulnerable to various disclosure or authentication bypass vulnerabilities. The scanner attempts to fingerprint the target server and then spider the server […]

Tags: dav, davscan, hack webdav, webdav, webdav fingerprinting, webdav hacking, webdav security, webdav security scanner

Posted in: Hacking Tools, Web Hacking | Add a Comment

Minion – Mozilla Security Testing Framework

December 5, 2016 | 2,073 views

Minion is a security testing framework built by Mozilla to bridge the gap between developers and security testers. To do so, it enables developers to scan with a wide variety of security tools, using a simple HTML-based interface. It consists of three umbrella projects: Minion Frontend, a Python, angular.js, and Bootstrap-based website that provides a […]

Tags: minion, minion backend, minion framework, minion frontend, minion vm, mozilla, mozilla security testing framework, security testing framework, security-testing

Posted in: Countermeasures, Security Software, Web Hacking | Add a Comment

OWASP OWTF – Offensive Web Testing Framework

September 24, 2016 | 4,343 views

OWASP Offensive Web Testing Framework is a project focused on penetration testing efficiency and alignment of security tests to security standards like: The OWASP Testing Guide (v3 and v4), the OWASP Top 10, PTES and NIST. The purpose of this tool is to automate the manual and uncreative parts of pen testing. For example, Figuring […]

Tags: automate pen testing, offensive web testing, owasp, owasp owtf, owtf, pen testing tool, penetration-testing, web security testing, web testing

Posted in: Hacking Tools, Web Hacking | Add a Comment

PunkSPIDER – A Web Vulnerability Search Engine

September 13, 2016 | 5,079 views

PunkSPIDER is a global-reaching web vulnerability search engine aimed at web applications. The goal is to allow the user to determine vulnerabilities in websites across the Internet quickly, easily, and intuitively. Please use PunkSPIDER responsibly. In simple terms, that means the authors have created a security scanner and the required architecture that can execute a […]

Tags: BSQLi, punk spider, punkspider, sqli, vulnerability search engine, web vulnerability, web vulnerability search engine, XSS

Posted in: Exploits/Vulnerabilities, Web Hacking | Add a Comment

UFONet – Open Redirect DDoS Tool

August 16, 2016 | 3,289 views

UFONet is an open redirect DDoS tool designed to launch attacks against a target, using insecure redirects in third party web applications, like a botnet. Obviously, only for testing purposes. The tool abuses OSI Layer 7-HTTP to create/manage ‘zombies’ and to conduct different attacks using; GET/POST, multi-threading, proxies, origin spoofing methods, cache evasion techniques, etc. […]

Tags: ddos, ddos test, ddos tool, ddos via web abuse, hacking tool, Hacking Tools, open redirects, Python, ufonet, untrusted url redirection, web abuse

Posted in: Hacking Tools, Web Hacking | Add a Comment

Everything You Need To Know About Web Shells

July 21, 2016 | 7,096 views

So let’s talk about Web Shells, something many of us are already familiar with, but to level the field – what is a web shell? A web shell is a script that can be uploaded to a web server to enable remote administration of the machine. Infected web servers can be either Internet-facing or internal […]

Tags: acunetix, hack php, php tunnel, php web shell, php-backdoor, web backdoor shell, web shell 101, web shell detection, web shell in php, web shell prevention, web shells, what is a web shell

Posted in: Advertorial, Web Hacking | Add a Comment

DMitry – Deepmagic Information Gathering Tool

July 18, 2016 | 5,104 views

DMitry (Deepmagic Information Gathering Tool) is a UNIX/(GNU) Linux Command Line program coded purely in C with the ability to gather as much information as possible about a host. DMitry has a base functionality with the ability to add new functions, the basic functionality of DMitry allows for information to be gathered about a target […]

Tags: deepmagic, deepmagic information gathering, dmitry, info gathering tool, information gathering, information gathering tool, subdomain scanner, tcp portscan, whois tool

Posted in: Hacking Tools, Network Hacking, Web Hacking | Add a Comment

TeamViewer Hacked? It Certainly Looks Like It

June 2, 2016 | 14,510 views

So is TeamViewer Hacked? There’s no definitive answer for now as they aren’t admitting to anything – but it does look very suspicious. The whole service was down for a few hours, the domains were apparently pointing to Chinese IP addresses (DNS Hijacking?) and no-one could login. A whole bunch of users also turned up […]

Tags: rdp hack, rdp security, remote control software, team viewer, teamviewer, teamviewer compromise, teamviewer hack, teamviewer security, Web Hacking

Posted in: Exploits/Vulnerabilities, Web Hacking | Add a Comment

Wfuzz – Web Application Brute Forcer

May 31, 2016 | 4,600 views

Wfuzz is a Python based flexible web application brute forcer which supports various methods and techniques to expose web application vulnerabilities. This allows you to audit parameters, authentication, forms with brute-forcing GET and POST parameters, discover unlinked resources such as directories/files, headers and so on. A brute force attack is a method to determine an […]

Tags: brute forcing tool, bruteforcing tool, web application bruteforcing, web bruteforcer, web bruteforcing, web directory discovery, web fuzzing, web url fuzzing, wfuzz