GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → Martyx00 → Vulnfanatic

Martyx00 / Vulnfanatic

Licence: apache-2.0
A Binary Ninja plugin for vulnerability research.

Programming Languages

python
139335 projects - #7 most used programming language

Labels

vulnerabilityvulnerability-scannersvulnerability-assessment

Projects that are alternatives of or similar to Vulnfanatic

Vulscan
Advanced vulnerability scanning with Nmap NSE
Stars: ✭ 2,305 (+1035.47%)
Mutual labels:  vulnerability, vulnerability-scanners, vulnerability-assessment
H4cker
This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.
Stars: ✭ 10,451 (+5048.28%)
Mutual labels:  vulnerability, vulnerability-scanners, vulnerability-assessment
Openvas Scanner
Open Vulnerability Assessment Scanner - Scanner for Greenbone Vulnerability Management (GVM)
Stars: ✭ 1,056 (+420.2%)
Mutual labels:  vulnerability, vulnerability-scanners, vulnerability-assessment
V3n0m Scanner
Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
Stars: ✭ 847 (+317.24%)
Mutual labels:  vulnerability, vulnerability-scanners
Whitewidow
SQL Vulnerability Scanner
Stars: ✭ 926 (+356.16%)
Mutual labels:  vulnerability, vulnerability-scanners
Trivy
Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues
Stars: ✭ 9,673 (+4665.02%)
Mutual labels:  vulnerability, vulnerability-scanners
Jackhammer
Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.
Stars: ✭ 633 (+211.82%)
Mutual labels:  vulnerability-scanners, vulnerability-assessment
Lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Stars: ✭ 9,137 (+4400.99%)
Mutual labels:  vulnerability-scanners, vulnerability-assessment
Vulnx
vulnx 🕷️ is an intelligent bot auto shell injector that detect vulnerabilities in multiple types of cms { `wordpress , joomla , drupal , prestashop .. `}
Stars: ✭ 1,009 (+397.04%)
Mutual labels:  vulnerability, vulnerability-assessment
Rebel Framework
Advanced and easy to use penetration testing framework 💣🔎
Stars: ✭ 183 (-9.85%)
Mutual labels:  vulnerability-scanners, vulnerability-assessment
Purify
All-in-one tool for managing vulnerability reports from AppSec pipelines
Stars: ✭ 72 (-64.53%)
Mutual labels:  vulnerability-scanners, vulnerability-assessment
Vailyn
A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python
Stars: ✭ 103 (-49.26%)
Mutual labels:  vulnerability-scanners, vulnerability-assessment
Whour
Tool for information gathering, IPReverse, AdminFInder, DNS, WHOIS, SQLi Scanner with google.
Stars: ✭ 18 (-91.13%)
Mutual labels:  vulnerability, vulnerability-scanners
Vfeed
The Correlated CVE Vulnerability And Threat Intelligence Database API
Stars: ✭ 826 (+306.9%)
Mutual labels:  vulnerability, vulnerability-scanners
Zeebsploit
web scanner - exploitation - information gathering
Stars: ✭ 159 (-21.67%)
Mutual labels:  vulnerability, vulnerability-scanners
Rapidscan
🆕 The Multi-Tool Web Vulnerability Scanner.
Stars: ✭ 775 (+281.77%)
Mutual labels:  vulnerability-scanners, vulnerability-assessment
Vulscan
vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...
Stars: ✭ 486 (+139.41%)
Mutual labels:  vulnerability, vulnerability-scanners
Hack Tools
hack tools
Stars: ✭ 488 (+140.39%)
Mutual labels:  vulnerability, vulnerability-scanners
Vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Stars: ✭ 8,844 (+4256.65%)
Mutual labels:  vulnerability-scanners, vulnerability-assessment
Arissploit
Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.
Stars: ✭ 114 (-43.84%)
Mutual labels:  vulnerability, vulnerability-scanners
View All Similar Projects ➔

VulnFanatic (3.5)

Author: Martin Petran

Binary Ninja assistant plugin for vulnerability research.

Description:

This plugin aims to assist during the vulnerability research process by providing a capability to scan the binary for potential occurrences of known vulnerabilities such as Use-after-free, buffer overflow or format string related issues. Along with the scanner, this plugin also includes a simple highlighter tool which should provide further aid during the follow-up manual analysis of the issues found by teh scanner.

Highlighter

The highlighter part of the plugin can be used after selecting an instruction. This feature allows you to highlight Assembly and HLIL blocks that lead to current block. Another feature also allows you to highlight either HLIL or Assembly variables. This provides ability to trace all points of interest for given variables.

Scanner

Scanner is using set of rules to perform basic analysis to detect any potentially vulnerable function calls. Issues that are found by this component are marked with tags that reflect the priority for a follow-up manual analysis. Following are the priority categories:

  • 🟥 High - Detected conditions are likely to lead to vulnerability.
  • 🟧 Medium - Detected conditions could theoretically lead to vulnerability.
  • 🟨 Low - Detected conditions are unlikely to lead to vulnerability.
  • 🟦 Info - Detected conditions were not clear enough to determine if the call is secure or not.

Example of discovered issue:

Sample

Please note that by no means this plugin provides a zero effort way to find vulnerabilities. However, it should assist you in prioritizing specific places in binaries which are worth investigating.

Minimum Version

This plugin requires the following minimum version of Binary Ninja:

  • 2263

License

This plugin is released under an Apache license.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].