XAHICO Platform
XAHICO Web Platform is a cloud-based SaaS solution for vulnerability detection, penetration testing, and adversary simulation. It offers: 1. A browser-accessible interface compatible with desktop and mobile devices. 2. Support for the entire kill-chain, including vulnerability detection, exploitation, and Command & Control sessions. 3. Proof-based verification for accurate results with reliability ratings. 4. Modular design with configurable and user-created modules available through a marketplace. 5. Support for Windows and Linux targets in Control Sessions. 6. Re-usable and shareable test/attack parameters. 7. Multithreaded operations for large-scale testing. 8. Designed for use by businesses, individuals, and penetration testing service providers. 9. Educational component for studying attack vectors and security measures.
FEATURES
SIMILAR TOOLS
A framework for exploiting Android-based devices and applications
An open-source security tool that simulates network breaches by self-propagating across data centers to test organizational resilience against lateral movement attacks.
A week-long series of articles and talks on evading Microsoft Advanced Threat Analytics (ATA) detection
A suite of tools for Wi-Fi network security assessment and penetration testing.
Preparation process for participating in the Pacific Rim CCDC 2015.
Python Exploit Development Assistance for GDB with enhanced debugging features and commands for exploit development.
Charlotte is an undetected C++ shellcode launcher for executing shellcode with stealth.
A tutorial on how to use Apache mod_rewrite to randomly serve payloads in phishing attacks
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.