vulscan - Advanced vulnerability scanning with Nmap NSE

•    Lua

---

Vulscan is a module which enhances nmap to a vulnerability scanner. The nmap option -sV enables version detection per service which is used to determine potential flaws according to the identified product. The data is looked up in an offline version of VulDB. Just execute vulscan like you would by refering to one of the pre-delivered databases. Feel free to share your own database and vulnerability connection with me, to add it to the official repository.

vulnerability vulnerability-scanners vulnerability-detection vulnerability-identification vulnerability-assessment security security-audit security-scanner penetration-testing nmap nmap-scripts exploit vulnerability-scanning vulnerability-databases vulnerability-database-entry nmap-scan-script nse nsescript lua-script

sandmap - Sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine

•    Shell

---

Sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning and allows you to easily use many advanced scanning techniques. Before using the Sandmap read the Command Line introduction.

nmap nmap-scripts port-scanner network-scanner network-discovery service-discovery information-gathering nse nsescript cli command-line hacking hacking-tool kali-linux kali-scripts backbox

Nameless Sprite Editor

•    CSharp

---

Nameless Sprite Editor is a tool used to thoroughly edit the graphics in ALL Game Boy Advance games. [ UNDER CONSTRUCTION ]

editor game-boy gameboy gameboy-advance gba nse

nmap-nse-modules - My collection of nmap nse modules

•    Lua

---

My collection of nmap nse modules

nmap nmap-scripts nse

htrace

•    Shell

---

In my daily work, I missed a tool with which I could test the configuration of domains in a simple way. The ability to use curl or openssl is very important, but I did not have the tools to automate this process. Until now, I used the tools available on the web, but each of them had some shortcomings. htrace.sh is a shell script that allows you to validate your domain configuration and catch any errors (e.g. redirect loops). It also displays basic information about the ssl configuration (if available), response headers, checks for mixed content and performs security scans using Nmap scripts and great external tools such as Ssllabs or Mozilla Observatory.

http-client https-client http-requests testing-tools traceroute redirect-urls httptracer tracing debugging-tool mozilla-observatory ssllabs-scan nmap nmap-scripts nse docker dockerfile security-tools pentesting

httprecon-nse - Advanced web server fingerprinting for Nmap

•    Lua

---

The httprecon project is doing some research in the field of web server fingerprinting, also known as http fingerprinting. The goal is the highly accurate identification of given httpd implementations. This is very important within professional vulnerability analysis. Besides the discussion of different approaches and the documentation of gathered results also an implementation for automated analysis is provided. This software shall improve the easyness and efficiency of this kind of enumeration. Traditional approaches as like banner-grabbing, status code enumeration and header ordering analysis are used. However, many other analysis techniques were introduced to increase the possibilities of accurate web server fingerprinting. Some of them were already discussed in the book Die Kunst des Penetration Testing (Chapter 9.3, HTTP-Fingerprinting, pp. 530-550).

vulnerability-scanners vulnerability-detection vulnerability-identification vulnerability-assessment penetration-testing webserver webserver-benchmarking fingerprinting nmap nmap-scripts nmap-scan-script nse nsescript

nlist - An nmap script to produce target lists for use with various tools.

•    Lua

---

An Nmap script to produce target lists for use with various tools. For the script to be run by default as part of all script scans (-sC), it will need to be saved in the scripts subdirectory of the Nmap data directory along with an nlist.conf file.

nmap pentesting nse nmap-scripts nsescript

nse - Nmap NSE scripts

•    Lua

---

A collection of Nmap scripts. Take a screenshot of discovered HTTP(S) services using PhantomJS. Requires at least Nmap version 7.0.

nmap nse nmap-scripts