shocker
Server scanner
A tool to identify and exploit vulnerable servers using Python
A tool to find and exploit servers vulnerable to Shellshock
333 stars
28 watching
87 forks
Language: Python
last commit: over 3 years agoRelated projects:
| Repository | Description | Stars |
|---|---|---|
| nccgroup/argumentinjectionhammer | An extension that identifies argument injection vulnerabilities in web applications using payloads and detection techniques | 118 |
| nccgroup/sobelow | A tool for detecting security vulnerabilities in Elixir and Phoenix applications | 1,692 |
| nccgroup/whalescan | A vulnerability scanner for Windows containers that performs benchmark checks and checks for CVEs/vulnerable packages on the container. | 154 |
 emo-crab/observer_ward | A tool for identifying vulnerabilities in web applications and services by analyzing patterns of web servers and services | 1,295 |
| nccgroup/conmachi | Analyzes and reports on the security configuration of a container environment | 106 |
 gquere/pwn_jenkins | Provides information and tools for exploiting security vulnerabilities in Jenkins servers | 1,971 |
 codingo/reconnoitre | Automates reconnaissance and service enumeration of network hosts to gather information and write recommendations for further testing. | 2,124 |
 menkrep1337/xsscon | A tool designed to scan websites for Cross-Site Scripting (XSS) vulnerabilities | 214 |
 portswigger/additional-scanner-checks | A collection of passive scanner checks to identify security vulnerabilities in web applications | 27 |
| nccgroup/go-pillage-registries | Tool to scan and pull images from a Docker registry | 104 |
 hewlettpackard/reconbf | A tool to scan and analyze the security configuration of a system | 47 |
| portswigger/aws-security-checks | A set of automated security checks for AWS services written in Python to identify potential vulnerabilities and configuration issues. | 36 |
 rip1s/ctfhelper | A tool that helps solve web challenges by scanning sensitive files in web servers. | 30 |
| nccgroup/phantap | A tool used by red teams to intercept and analyze network traffic without disrupting the victim's connection. | 585 |
 twelvesec/rootend | A tool designed to automate the discovery and exploitation of security vulnerabilities in Unix systems. | 147 |