All Projects → ehrishirajsharma → Swiftnessx

ehrishirajsharma / Swiftnessx

Licence: gpl-3.0
A cross-platform note-taking & target-tracking app for penetration testers.

Programming Languages

javascript
184084 projects - #8 most used programming language

Projects that are alternatives of or similar to Swiftnessx

Rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with…
Stars: ✭ 3,439 (+411%)
Mutual labels:  security-tools, penetration-testing, bug-bounty
Awesome Bbht
A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain.
Stars: ✭ 190 (-71.77%)
Mutual labels:  security-tools, penetration-testing, bug-bounty
Whatweb
Next generation web scanner
Stars: ✭ 3,503 (+420.51%)
Mutual labels:  security-tools, penetration-testing
Cheatsheet God
Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
Stars: ✭ 3,521 (+423.18%)
Mutual labels:  security-tools, penetration-testing
Habu
Hacking Toolkit
Stars: ✭ 635 (-5.65%)
Mutual labels:  security-tools, penetration-testing
reconmap
Vulnerability assessment and penetration testing automation and reporting platform for teams.
Stars: ✭ 242 (-64.04%)
Mutual labels:  penetration-testing, bug-bounty
aquatone
A Tool for Domain Flyovers
Stars: ✭ 43 (-93.61%)
Mutual labels:  penetration-testing, bug-bounty
Cerberus
一款功能强大的漏洞扫描器,子域名爆破使用aioDNS,asyncio异步快速扫描,覆盖目标全方位资产进行批量漏洞扫描,中间件信息收集,自动收集ip代理,探测Waf信息时自动使用来保护本机真实Ip,在本机Ip被Waf杀死后,自动切换代理Ip进行扫描,Waf信息收集(国内外100+款waf信息)包括安全狗,云锁,阿里云,云盾,腾讯云等,提供部分已知waf bypass 方案,中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等),支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能
Stars: ✭ 389 (-42.2%)
Mutual labels:  security-tools, penetration-testing
tugarecon
Pentest: Subdomains enumeration tool for penetration testers.
Stars: ✭ 142 (-78.9%)
Mutual labels:  penetration-testing, bug-bounty
Security Tools
Collection of small security tools, mostly in Bash and Python. CTFs, Bug Bounty and other stuff.
Stars: ✭ 509 (-24.37%)
Mutual labels:  security-tools, bug-bounty
Sn1per
Attack Surface Management Platform | Sn1perSecurity LLC
Stars: ✭ 4,897 (+627.64%)
Mutual labels:  penetration-testing, security-tools
Monkey
Infection Monkey - An automated pentest tool
Stars: ✭ 5,572 (+727.93%)
Mutual labels:  security-tools, penetration-testing
Nightingale
It's a Docker Environment for pentesting which having all the required tool for VAPT.
Stars: ✭ 119 (-82.32%)
Mutual labels:  penetration-testing, bug-bounty
clairvoyance
Obtain GraphQL API Schema even if the introspection is not enabled
Stars: ✭ 448 (-33.43%)
Mutual labels:  penetration-testing, bug-bounty
Osmedeus
Fully automated offensive security framework for reconnaissance and vulnerability scanning
Stars: ✭ 3,391 (+403.86%)
Mutual labels:  security-tools, penetration-testing
filter-var-sqli
Bypassing FILTER_SANITIZE_EMAIL & FILTER_VALIDATE_EMAIL filters in filter_var for SQL Injection ( xD )
Stars: ✭ 29 (-95.69%)
Mutual labels:  penetration-testing, bug-bounty
A Red Teamer Diaries
RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
Stars: ✭ 382 (-43.24%)
Mutual labels:  security-tools, penetration-testing
Hashview
A web front-end for password cracking and analytics
Stars: ✭ 601 (-10.7%)
Mutual labels:  security-tools, penetration-testing
wifi-penetration-testing-cheat-sheet
Work in progress...
Stars: ✭ 149 (-77.86%)
Mutual labels:  penetration-testing, bug-bounty
vaf
Vaf is a cross-platform very advanced and fast web fuzzer written in nim
Stars: ✭ 294 (-56.32%)
Mutual labels:  penetration-testing, bug-bounty


Swiftness
SwiftnessX v0.2

forthebadge forthebadge

A cross-platform note-taking & target-tracking app for penetration testers built on ElectronJS.

swiftnessX

Download

Contents

Checklists

We’re aiming to release a number of checklists with v0.3 release. Please send the request here to join in private-repo to collaborate with other researchers on its development. In meantime, you can download the below checklists to import in your libraries:

You can also download the code to generate this checklist whenever any updates are available in the original repository.


  • OSCP Methodology from @InitRoot: The checklist aim to assist OSCP students with a baseline methodology for the labs and exam environments. (Coming Soon)

To Import: After downloading the .json file:

  1. Open SwiftnessX app
  2. Click on import/export button (right next to the Logo)
  3. Select Import and select the downloaded .json file

Run from source

Using Yarn (Recommended)

View Steps
To install yarn, please refer to this link.

> git clone https://github.com/ehrishirajsharma/swiftnessx.git //clone the repository
> sudo yarn //install dependencies within the repo folder
> sudo yarn dev //run the package

To update just use git pull or if dependencies are updated than first install them by yarn

Using Npm

View Steps
To install npm, please refer to this link.

> sudo npm install electron -g --unsafe-perm=true --allow-root //install electron globally in system
> git clone https://github.com/ehrishirajsharma/swiftnessx.git //clone the repository
> sudo npm install --unsafe-perm=true --allow-root //install dependencies
> sudo npm run dev //run the package

To update just use git pull or if dependencies are updated than first install them by npm install

Report

🐛 Reporting a bug?

This is very early days of this project, therefore unexpected bugs, UI glitches and data-corruptions related issues may occur. I’d personally and strongly recommend to keep taking backups daily to not to loose any data if something bad happens.

Before reporting a bug or glitch, please confirm if it is not previously reported. Give most possible information about the issue: reproduction steps, OS/environments specifics and any possible suggestions to fix it.

You can use this link to create and file an issue.


🚨 Reporting a security vulnerability?

Swiftness project was initially started to combat my day-to-day personal issues related to managing findings and checklist and was never built in mind for cross-platform support. However, to fulfill the gap for other OS, I decided to switch the project to ElectronJS. With the better flexibility, it came with a drawback of having too much dependencies on 3rd party libraries, ultimately, more concerns related to its security.

What measures we’ve been taking:

View
  • Kept the 3rd party dependencies lower, and built most of the modules from scratch.
  • Tested injection related vulnerabilities.
  • Regular check-up on 0-day vulnerabilities of the dependencies.

Where to report?

View
You can send an email to [email protected], please provide as much as possible information on reproducing and fixing the vulnerabilities. We’re already aware of a few security vulnerabilities and working on to fix it.

References related to Electron security

Please refer to the below guide on understanding the basics and security of Electron:

Also check the package.json to see this project dependencies.

Upcomings

We aim to release a major new update every 3 months, hoping to short this cycle however, testing and fixing the glitches for all the platforms take a bit time. Moreover, this project is maintained on weekends so you may see some slow replies on emails or issues.

  • [ ] Dark Theme
  • [ ] Support for Dropbox and Google Drive Sync
  • [ ] Performance Refactors
  • [ ] Reporting tools inspired by Frans Rosen (@fransr): https://github.com/fransr/template-generator
  • [ ] Better Text Editor: Enhanced Table features, export options, highlighting customisations, etc

How to contribute?

You can contribute and keep this project alive by, finding bugs or security issues, suggesting new features, grammatical mistakes / document writing or by creating pull request for pending bugs or feature.

You can also contact me at Twitter (my DM is open), or write me an email to [email protected] to discuss anything related to the current goals, project’s future or any possible collaborations.

Credits

Special thanks to Tomas Baskys and Pankaj Prajapat for their huge contributions on this project. 👏

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].