codingo / Minesweeper
Licence: gpl-3.0
A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).
Stars: ✭ 162
Programming Languages
python
139335 projects - #7 most used programming language
Labels
Projects that are alternatives of or similar to Minesweeper
Crithit
Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.
Stars: ✭ 182 (+12.35%)
Mutual labels: hacking, security-tools, penetration-testing, hacking-tool, security-audit, bugbounty
Taipan
Web application vulnerability scanner
Stars: ✭ 359 (+121.6%)
Mutual labels: hacking, security-tools, hacking-tool, security-audit, security-scanner, web-security
Nosqlmap
Automated NoSQL database enumeration and web application exploitation tool.
Stars: ✭ 1,928 (+1090.12%)
Mutual labels: hacking, security-tools, penetration-testing, hacking-tool, security-audit, bugbounty
Vhostscan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
Stars: ✭ 767 (+373.46%)
Mutual labels: hacking, security-tools, penetration-testing, hacking-tool, security-audit, bugbounty
Reconnoitre
A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
Stars: ✭ 1,824 (+1025.93%)
Mutual labels: hacking, security-tools, penetration-testing, hacking-tool, security-audit, security-scanner
Hosthunter
HostHunter a recon tool for discovering hostnames using OSINT techniques.
Stars: ✭ 427 (+163.58%)
Mutual labels: hacking, security-tools, penetration-testing, hacking-tool, bugbounty
Interlace
Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.
Stars: ✭ 760 (+369.14%)
Mutual labels: hacking, security-tools, penetration-testing, hacking-tool, bugbounty
Inql
InQL - A Burp Extension for GraphQL Security Testing
Stars: ✭ 715 (+341.36%)
Mutual labels: security-tools, security-audit, security-scanner, burpsuite, burp-extensions
Awesome Bbht
A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain.
Stars: ✭ 190 (+17.28%)
Mutual labels: hacking, security-tools, penetration-testing, hacking-tool, bugbounty
Osmedeus
Fully automated offensive security framework for reconnaissance and vulnerability scanning
Stars: ✭ 3,391 (+1993.21%)
Mutual labels: hacking, security-tools, penetration-testing, hacking-tool, bugbounty
Resources
A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.
Stars: ✭ 62 (-61.73%)
Mutual labels: hacking, security-tools, penetration-testing, security-audit, bugbounty
Scilla
🏴☠️ Information Gathering tool 🏴☠️ DNS / Subdomains / Ports / Directories enumeration
Stars: ✭ 116 (-28.4%)
Mutual labels: hacking, security-tools, penetration-testing, hacking-tool
Sippts
Set of tools to audit SIP based VoIP Systems
Stars: ✭ 116 (-28.4%)
Mutual labels: hacking, security-tools, hacking-tool, security-audit
Burpa
Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).
Stars: ✭ 427 (+163.58%)
Mutual labels: security-tools, security-scanner, burpsuite, web-security
Habu
Hacking Toolkit
Stars: ✭ 635 (+291.98%)
Mutual labels: hacking, security-tools, penetration-testing, security-audit
Jok3r
Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework
Stars: ✭ 645 (+298.15%)
Mutual labels: hacking, security-tools, hacking-tool, security-audit
Hellraiser
Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.
Stars: ✭ 413 (+154.94%)
Mutual labels: hacking, security-tools, hacking-tool, security-audit
Dirsearch
Web path scanner
Stars: ✭ 7,246 (+4372.84%)
Mutual labels: hacking, penetration-testing, hacking-tool, bugbounty
Diamorphine
LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64)
Stars: ✭ 725 (+347.53%)
Mutual labels: hacking, security-tools, hacking-tool, security-audit
Cheatsheet God
Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
Stars: ✭ 3,521 (+2073.46%)
Mutual labels: hacking, security-tools, penetration-testing, hacking-tool
A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000+ malicious cryptocurrency mining domains (cryptojacking).
Summary
Minesweeper will passively scan in-scope items looking for matches against more than 23000+ known cryptojacking domains within the source of pages. When discovered, an alert similar to the following will be raised:
Manually Updating Sources
As this is the first build of Minesweeper lists are currently built based on CoinBlockerLists. As the project matures more sources will be added, as well as direct code checks. Since CoinBlockerLists updates quite frequently code is included to allow you to manually update your source list from the CoinBlockerLists github project.
If you don't wish to wait for the next build of the plugin and want to update your own sources you can use the following in the root of your cloned project:
$ ./lib/update_sources.py
This should produce an output similar to the following on a successful update:
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].