Sn1per
0 (0)
An open-source attack surface management platform for identifying and managing vulnerabilities
The purpose of this tool is to run a given set of YARA rules against the given node_module folder. With this approach, We can define YARA rules to identify suspicious scripts which are injected into node packages. Mainly inspired by these articles: Malicious packages in npm, Malicious NPM packages target Amazon, Slack with new dependency attacks, Hunting malicious NPM packages. This package can be added to the CI/CD pipeline. Software Requirements: Docker, Docker Compose, Makefile. How to use: Clone this repo, execute audit operation with `make` command, report available in `artifacts/output.json`.
An open-source attack surface management platform for identifying and managing vulnerabilities
Next-generation Linux exploit suggester with improved features for finding privilege escalation vulnerabilities.
Linux privilege escalation auditing tool for detecting security deficiencies in Linux kernels.
Compares target's patch levels against Microsoft vulnerability database and detects missing patches.
A utility for testing AWS Lambda functions for SQL Injection vulnerabilities using SQLMap attacks.
Vulnerability scanner for Linux/FreeBSD, written in Go, agent-less, informs users of vulnerabilities related to the system and affected servers.