bl4de/security-tools

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

security-tools

Small security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.

security-tools's Issues

[htmlanalyzer.py] add summary to output instead of printing line-by-line

Add grouped summary as an output, eg.:

JavaScript:
- <script> tag found on line 78
- document.getElementById() call found on line 112
CSS:
- <link rel="stylesheet"> found on line 8

and so on :)

[nodestructor] Add option to save output to log file

Add option to save output to log file

[diggit.py] Recreate folder(s) original tree while saving blobs recursively

Recreate folder(s) original tree while saving blobs recursively

[new tool] Create script for OWASP TG OTG-INFO-003

Create script for 'Review Webserver Metafiles for Information Leakage'

https://www.owasp.org/index.php/Review_Webserver_Metafiles_for_Information_Leakage_(OTG-INFO-003)

[hexview] Display basic file info (size, date created/modified etc.)

Display basic file info (size, date created/modified etc.)

[diggit.py] Add support for SVN

Add support for SVN

[hexview] File signature detection based on 'magic numbers'

Add basic file type detection based on magic numbers:

https://en.wikipedia.org/wiki/List_of_file_signatures

[pef.py] Implement checking security issue(s) from 'Survive The Deep End: PHP Security'

TBD
http://phpsecurity.readthedocs.org/en/latest/Introduction.html

[bl4zzer.py] Web Application Fuzzer - new tool

New tool to fuzz webapps
Use payloads from https://github.com/fuzzdb-project/fuzzdb

[diggit.py] Recreate remote .git folder based on last tree hash

Recursively download remote .git last tree hash

Alternatives

Can this be ran inside a Chrome Console by chance? Curious since one of my PC's don't allow new software like Python.

[hexview] Fix visual issues with diff and last line of file content

Fix visual issues in last line of the file; diff looks terrible as well :)

[hexview] Error when i run the tool

Traceback (most recent call last):
File "hexview.py", line 307, in
print(file_type(open(args.file, 'rb').read(8)))
File "hexview.py", line 174, in file_type
if file_signature.startswith(signature.upper()):
TypeError: startswith first arg must be bytes or a tuple of bytes, not str

How can i fix it?

[diggit.py] Add support for .idea folder

Add support for .idea folder

• enumerate folders and files
• download files if available

[hexview.py] Add option to see binary diff of two files

Add option to see binary diff of two files

Output should contain two compared files, side by side, with diff bytes marked (white bg?)

[pef.py] Add support for unserialize bugs

Add detection of unserialize() usage

Some refs:
https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/
https://www.notsosecure.com/remote-code-execution-via-php-unserialize/
http://stackoverflow.com/questions/3115559/exploitable-php-functions

[nodestructor] Add options to configure HTTP headers for curl request

Add options to configure HTTP headers for curl request:

• Host
• User-Agent
• Cookie (?)
• other (?)

[pef.py] dangerous patterns - LFI/RFI RegExp checkin

fileInclude = ["include($_GET", "require($_GET", "include_once($_GET", "require_once($_GET"]

...

for _dp in fileInclude:
            if _dp in __line:
                total += 1
                printcodeline(_line, i, _dp + '()', _PefOutput.fiMsgFound)

Use regexp to check this vuln

[pef.py] Implement regular expression for checking of $_GET, $_POST request handling

Implement regular expression for checking of $_GET, $_POST request handling

[hexview] Add search option for strings/bytes sequence

[hexview] Add search option for strings/bytes sequence

[all] Move ConsoleOutputBeautifier to separate class

Create common module(s) imported by any of tool when needed

Move ConsoleOutputBeautifier to separate module

[htmlanalyzer.py] Remove duplicate line(s)

Remove duplicate lines from output to avoid something like this (three separate hits in the same line of code):

line 79:  some developer(s) related comment string found at line 79:
		//temporary solution for timeout infinite loop, will remove when issue is resolved
 line 79:  some developer(s) related comment string found at line 79:
		//temporary solution for timeout infinite loop, will remove when issue is resolved
 line 79:  some developer(s) related comment string found at line 79:
		//temporary solution for timeout infinite loop, will remove when issue is resolved

[pef.py] Add support for type juggling issues

Add support for type juggling issues - detection of dangerous "==" operator usages

New Logo

Hello sir.
You have a great app, unfortunately this app does not have a logo yet, may I donate a logo for your app?

[hexview] An arg to select lowercase/uppercase output

An arg to select lowercase/uppercase output

Lowercase by default.

Minor typo

security-tools/ftpLoginBruteforcer.py

Line 19 in b6883b3

print "[+] Legged in! -> {}".format(str(resp))

Might want that to be Logged 👍

PHPExploitableFn

Analyse PHP source code for potential expolitable functions

Reference:
http://stackoverflow.com/questions/3115559/exploitable-php-functions

[nodestructor] Fix no found error

$ nodestructor -R ./node_

#####  nodestructor.py - static code analysis for Node.js applications  #####
# GitHub: bl4de | Twitter: @_bl4de | hackerone.com/bl4de | [email protected] #


Traceback (most recent call last):
  File "/home/rafal.janicki/bin/nodestructor", line 103, in <module>
    FILE_LIST = os.listdir(sys.argv[2])
OSError: [Errno 2] No such file or directory: './node_

[hexview] Color highlighting for ASCII output in diff

Color highlighting for ASCII output in diff

https://twitter.com/SasukeOurad/status/1035292489903759361