penetration testing Archives

jwt_tool – JSON Web Token security testing toolkit

jwt_tool audits JSON Web Tokens, tests signature weaknesses, fuzzes token claims and checks authentication flaws in web applications.

Commix investigates OS command injection flaws in web applications, using several detection techniques and configurable HTTP test requests.

Wfuzz tests web applications by injecting payloads into requests, combining wordlists and filtering responses during security assessments.

ZAP tests web application security with an intercepting proxy, automated scanning, authentication testing and extensible add-on ecosystem.

Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.

BeEF is pioneering techniques that provide penetration testers with practical client-side attack vectors.

sqlmap automates SQL injection testing, with database fingerprinting, multiple detection techniques and security assessment options.

Kali Linux is an advanced penetration testing distribution which provides useful and relevant features for security professionals.