找到
24
篇与
开源工具
相关的结果
- 第 2 页
-
wpscan - 安全从业者的得力助手 推荐一个实用的开源工具——wpscan。项目由wpscanteam开发维护，GitHub上获得了 9759 个Star。简单来说，它是一款WPScan WordPress安全扫描仪。专为安全专业人员和博客维护人员编写，以测试其WordPress网站的安全性。通过，对于站长和开发者来说是个不错的工具。 工具功能介绍 WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin Prerequisites- (Optional but highly recommended: rbenv) Ruby >= 3.3 - Recommended: latest stable Curl >= 7.72 - Recommended: latest stable The 7.29 has a segfault The {card-default label="📦 工具信息"} 🔗 项目地址：https://github.com/wpscanteam/wpscan ⭐ Star数：9759 💻 开发语言：Ruby 📝 项目描述：WPScan WordPress安全扫描仪。专为安全专业人员和博客维护人员编写，以测试其WordPress网站的安全性。通过 {/card-default} 总的来说，wpscan是一个功能比较实用的开源工具，适合日常工作和学习使用。如果你正在寻找一款相关工具，不妨下载试试。使用前建议仔细阅读项目文档。 本文介绍的工具来源于GitHub开源社区，仅供学习交流使用，请遵守原项目开源协议。
-
黑客必备工具：pwntools 详细介绍 推荐一个实用的开源工具——pwntools。项目由Gallopsled开发维护，GitHub上获得了 13676 个Star。简单来说，它是一款CTF框架和漏洞利用开发库，对于站长和开发者来说是个不错的工具。 工具功能介绍 pwntools logo图片Pwntools is a CTF framework and exploit development library. Written in Python, it is designed for rapid prototyping and development, and intended to make exploit writing as simple as possible. python from pwn import * context(arch = 'i386', os = 'linux')r = remote('exploitme.example.com', 31337) # EXPLOIT CODE GOES HERE r.send(asm(shellcraft.sh())) r.interactive() Documentation Our documentation is available at docs.pwntools.comA series of tutorials is also available onlineTo get you started, we've provided some example solutions for past CTF challenges in our write-ups repository. Installation Pwntools is best supported on 64-bit Ubuntu LTS releases (22.04 and 24.04). Most functionality should work on any Posix-like distribution (Debian, Arch, FreeBSD, OSX, etc.).Pwntools supports Python 3.10+ since version 5.0.0. Use Pwntools 4.x for older versions as well as Python 2.7. Most of the functionality of pwntools is self-contained and Python-only. You should be able to get running quickly with sh sudo apt-get update sudo apt-get install python3 python3-pip python3-dev git libssl-dev libffi-dev build-essential python3 -m pip install --upgrade pip python3 -m pip install --upgrade pwntools However, some of the features (assembling/disassembling foreign architectures) require non-Python dependencies. For more information, see the complete installation instructions here. Contribution See CONTRIBUTING.md Contact and Community If you have any questions not worthy of a bug report, join the Discord server at https://discord.gg/96VA2zvjCB {card-default label="📦 工具信息"} 🔗 项目地址：https://github.com/Gallopsled/pwntools ⭐ Star数：13676 💻 开发语言：Python 📝 项目描述：CTF框架和漏洞利用开发库 {/card-default} 总的来说，pwntools是一个功能比较实用的开源工具，适合日常工作和学习使用。如果你正在寻找一款相关工具，不妨下载试试。使用前建议仔细阅读项目文档。 本文介绍的工具来源于GitHub开源社区，仅供学习交流使用，请遵守原项目开源协议。
-
分享一个不错的开源工具：osv-scanner 推荐一个实用的开源工具——osv-scanner。项目由google开发维护，GitHub上获得了 10990 个Star。简单来说，它是一款用Go编写的漏洞扫描程序，使用https://osv.dev提供的数据，对于站长和开发者来说是个不错的工具。 工具功能介绍 ---Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. OSV-Scanner provides an officially supported frontend to the OSV database and CLI interface to OSV-Scalibr that connects a project’s list of dependencies with the vulnerabilities that affect them.OSV-Scanner supports a wide range of project types, package managers and features, including but not limited to:- Languages: C/C++, Dart, Elixir, Go, Java, Javascript, PHP, Python, R, Ruby, Rust. Package Managers: npm, pip, yarn, maven, go modules, cargo, gem, composer, nuget and others. Operating Systems: Detects vulnerabilities in OS packages on Linux systems. Containers: Scans container images for vulnerabilities in their base images and included packages. Guided Remediation: Provides recommendations for package version upgrades based on criteria such as dependency depth, minimum severity, fix strategy, and return on investment.OSV-Scanner uses the extensible OSV-Scalibr library under the hood to provide this functionality. If a language or package manager is not supported currently, please file a feature request.The underlying database, OSV.dev has several benefits in comparison with closed source advisory databases and scanners:- Covering most open source language and OS ecosystems (including Git), it’s comprehensive. Each advisory comes from an open and authoritative source (e.g. GitHub Security Advisories, RustSec Advisory Database, Ubuntu security notices) Anyone can suggest improvements to advisories, resulting in a very high quality database. The OSV format unambiguously stores information about affected versions in a machine-readable format that precisely maps onto a developer’s list of packagesThe above all results in accurate and actionable vulnerability notifications, which reduces the time needed to resolve them. Check out OSV.dev for more details! Basic installationTo install OSV-Scanner, please refer to the installation section of our documentation. OSV-Scanner releases can be found on the releases page of the GitHub repository. The recommended method is to download a prebuilt binary for your platform. Alternatively, you can use go install github.com/google/osv-scanner/v2/cmd/osv-scanner@latest to build it from source. Key FeaturesFor more information, please read our detailed documentation to learn how to use OSV-Scanner. For detailed information about each feature, click their titles in this README.Please note: These are the instructions for the latest OSV-Scanner V2 beta. If you are using V1, checkout the V1 README and documentation instead. Scanning a source directory bash $ osv-scanner scan source -r /path/to/your/dir This command will recursively scan the specified directory for any supported package files, such as package.json, go.mod, pom.xml, etc. and output any discovered vulnerabilities.OSV-Scanner has the option of using call analysis to determine if a vulnerable function is actually being used in the project, resulting in fewer false positives, and actionable alerts.OSV-Scanner can also detect vendored C/C++ code for vulnerability scanning. See here for details. Supported LockfilesOSV-Scanner supports 11+ language ecosystems and 19+ lockfile types. To check if your ecosystem is covered, please check out our detailed documentation. Container ScanningOSV-Scanner also supports comprehensive, layer-aware scanning for container images to detect vulnerabilities in the following operating system packages and language-specific dependencies.| Distro Support | Language Artifacts Support | Alpine OSGoDebianJavaUbuntuNode PythonSee the full documentation for details on support.Usage: bash $ osv-scanner scan image my-image-name:tag screencast of html output of container scanning图片 License ScanningCheck your dependencies' licenses using deps.dev data. For a summary: bash osv-scanner --licenses path/to/repository To check against an allowed license list (SPDX format): bash osv-scanner --licenses="MIT,Apache-2.0" path/to/directory Offline ScanningScan your project against a local OSV database. No network connection is required after the initial database download. The database can also be manually downloaded. bash osv-scanner --offline --download-offline-databases ./path/to/your/dir Guided Remediation (Experimental)> [!WARNING] Guided remediation (the fix command) can be risky when run on untrusted projects. It may trigger the package manager to execute scripts or follow external registries specified in the project. Please ensure you trust the source code and artifacts before proceeding.OSV-Scanner provides guided remediation, a feature that suggests package version upgrades based on criteria such as dependency depth, minimum severity, fix strategy, and return on investment. We currently support remediating vulnerabilities in the following files:| Ecosystem | File Format (Type) | Supported Remediation Strategies |npmpackage-lock.json (lockfile)in-placenpmpackage.json (manifest)relockMavenpom.xml (manifest)overrideThis is available as a headless CLI command, as well as an interactive mode.Example (for npm) bash $ osv-scanner fix \ --max-depth=3 \ --min-severity=5 \ --ignore-dev \ --strategy=in-place \ -L path/to/package-lock.json Interactive mode (for npm) bash $ osv-scanner fix \ -M path/to/package.json \ -L path/to/package-lock.json Data Sources and PrivacyOSV-Scanner communicates with the following external services during operation: OSV.dev APIThe primary data source for vulnerability information. OSV-Scanner queries this API to check packages for known vulnerabilities and to identify vendored C/C++ dependencies. Data sent includes package names, versions, ecosystems, and file hashes. Use --offline mode to disable network requests and scan against a local database instead. deps.dev APIUsed for supplementary package information:- Dependency resolution: Resolves dependency graphs for vulnerability scanning and remediation Container image scanning: Queries container image metadata for vulnerability detection License scanning (--licenses flag): Retrieves license information for packages Package deprecation: Checks if packages are deprecatedData sent includes package names, versions, and ecosystems. No source code is transmitted. Package RegistriesWhen using native registry for dependency resolution (instead of deps.dev), OSV-Scanner may query:| Registry | URL | Used For | Maven Centralrepo.maven.apache.org/maven2Maven package metadata and POM filesnpm Registryregistry.npmjs.orgnpm package metadataPyPIpypi.orgPython package metadataContribute Report ProblemsIf you have what looks like a bug, please use the GitHub issue tracking system. Before you file an issue, please search existing issues to see if your issue is already covered. Contributing code to osv-scannerSee CONTRIBUTING.md for documentation on how to contribute code. Star History {card-default label="📦 工具信息"} 🔗 项目地址：https://github.com/google/osv-scanner ⭐ Star数：10990 💻 开发语言：Go 📝 项目描述：用Go编写的漏洞扫描程序，使用https://osv.dev提供的数据 {/card-default} 总的来说，osv-scanner是一个功能比较实用的开源工具，适合日常工作和学习使用。如果你正在寻找一款相关工具，不妨下载试试。使用前建议仔细阅读项目文档。 本文介绍的工具来源于GitHub开源社区，仅供学习交流使用，请遵守原项目开源协议。
-
GhostTrack - 一款值得收藏的神器 推荐一个实用的开源工具——GhostTrack。项目由HunxByts开发维护，GitHub上获得了 15019 个Star。简单来说，它是一款跟踪位置或，对于站长和开发者来说是个不错的工具。 工具功能介绍 Useful tool to track location or mobile number, so this tool can be called osint or also information gatheringNew update : Version 2.2 Instalation on Linux (deb) sudo apt-get install git sudo apt-get install python3 Instalation on Termux pkg install git pkg install python3 Usage Tool git clone https://github.com/HunxByts/GhostTrack.git cd GhostTrack pip3 install -r requirements.txt python3 GhostTR.py Display on the menu IP Tracker on the IP Track menu, you can combo with the seeker tool to get the target IP :zap: Install Seeker : Get Seeker Display on the menu Phone Tracker on this menu you can search for information from the target phone numberDisplay on the menu Username Tracker on this menu you can search for information from the target username on social media :zap: Author : HunxByts {card-default label="📦 工具信息"} 🔗 项目地址：https://github.com/HunxByts/GhostTrack ⭐ Star数：15019 💻 开发语言：Python 📝 项目描述：跟踪位置或 {/card-default} 总的来说，GhostTrack是一个功能比较实用的开源工具，适合日常工作和学习使用。如果你正在寻找一款相关工具，不妨下载试试。使用前建议仔细阅读项目文档。 本文介绍的工具来源于GitHub开源社区，仅供学习交流使用，请遵守原项目开源协议。
