Configurable tool to scan for webshell indicators of compromise (IOCs) across HTTP/HTTPS services with rate-limiting and abnormal reply detection. Uses JSON configuration files to define detection rules for different software platforms.
☆17Aug 1, 2025Updated 11 months ago
Alternatives and similar repositories for HttpIOCScan
Users that are interested in HttpIOCScan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Maturity Model Collaborative project☆15Feb 27, 2023Updated 3 years ago
- Template to detect some malware☆15Aug 7, 2023Updated 2 years ago
- A Large Action Model designed to operate on MacOS or Windows which interacts with common C2 interfaces such as Cobalt Strike, Havoc, or B…☆26Feb 29, 2024Updated 2 years ago
- Hackfest Talk - Abusing PHP 7’s OPcache to Spawn Webshells☆10Nov 6, 2016Updated 9 years ago
- Goby-Poc-Collection for Goby scanner https://github.com/gobysec/Goby - forked from many github accounts Thanks the authors☆13Dec 10, 2023Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- CTF collaboration tool for teams☆10Nov 10, 2017Updated 8 years ago
- Pretty random INTERNET syn/ack scanner, useful for finding specific alive ports for research.☆27Nov 12, 2022Updated 3 years ago
- experimental wildcard subdomain filtering prototype☆14Aug 5, 2023Updated 2 years ago
- Bulk scanning tool for ServiceNow CVE-2024-4879 vulnerability☆10Jul 12, 2024Updated 2 years ago
- Search and download dictionaries for testing, bruteforcing, fuzzing and exploit-development.☆15Aug 11, 2021Updated 4 years ago
- Handy scripts and one-liners to make life easier☆39Mar 6, 2023Updated 3 years ago
- Convert an IP into Alternative / Obfuscated versions of itself☆14Aug 13, 2022Updated 3 years ago
- An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share th…☆12Feb 16, 2021Updated 5 years ago
- Presentations☆10Oct 2, 2017Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆10Aug 28, 2020Updated 5 years ago
- A transformer that decodes swipes across a smartphone keyboard into words (gesture / swipe / glide typing) (enhanced yandex cup solution)☆16Updated this week
- A client for Hashicorp Vault written in TypeScript☆14Nov 20, 2023Updated 2 years ago
- A web application dedicated to write sysmon configuration file☆13Oct 23, 2025Updated 8 months ago
- ☆17Apr 15, 2020Updated 6 years ago
- A New Exploitation Technique for Visual Studio Projects☆13Nov 5, 2023Updated 2 years ago
- Help deobfuscate VBScript☆18Jul 1, 2022Updated 4 years ago
- Deobfuscation of XorStringsNet☆13Nov 5, 2024Updated last year
- A Mozilla Firefox extension which allows quick access to your google-dorking result☆19Jun 18, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A collection of various scripts and automations to simplify Checkmarx SAST and IAST setup and use☆14Aug 30, 2018Updated 7 years ago
- tool that generates bypasses for open redirects☆49Apr 18, 2022Updated 4 years ago
- My personal Blog☆11Jun 26, 2026Updated 3 weeks ago
- Nuclei templates for source code analysis. Detects hardcoded secrets, config leaks, debug endpoints. Also helps identify OWASP Top 10 iss…☆83Jun 11, 2025Updated last year
- Just your regular Qur'an apps on Android platform, except I'm trying to make it's app size as small as possible while not sacrificing any…☆15Nov 13, 2025Updated 8 months ago
- Generic ASM Vulnerability Schema XSLT☆12May 30, 2018Updated 8 years ago
- Automatic security vulnerability remediation for your code.☆68Updated this week
- Command Line Interface (CLI) tool for BrightSec's solutions.☆22Updated this week
- ☆15Apr 5, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Challenges and writeups for PatriotCTF 2024☆19Sep 28, 2024Updated last year
- ☆10Feb 27, 2019Updated 7 years ago
- ACT documentation repo☆16May 22, 2024Updated 2 years ago
- Some private tools i decided to release for public.☆49Mar 14, 2024Updated 2 years ago
- CTF Challenge for CSAW Finals 2021☆13Nov 17, 2021Updated 4 years ago
- Coding without conditions☆15Updated this week
- This PowerShell script is designed for authorized penetration testing and security labs to extract and decrypt credentials from Azure AD …☆28Oct 23, 2024Updated last year