Deemon is a tool to detect CSRF in web applications. Deemon has been used for the paper "Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs" by G. Pellegrino, M. Johns, S. Koch, M. Backes, and C. Rossow.
☆75Jun 6, 2018Updated 7 years ago
Alternatives and similar repositories for deemon
Users that are interested in deemon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A plugin to check xss by using chrome_headless☆52Sep 17, 2018Updated 7 years ago
- ☆13Apr 16, 2020Updated 5 years ago
- Python script to extract and bruteforce OpenNMS password hashes in users.xml☆18Jun 21, 2017Updated 8 years ago
- Spring Data Commons RCE 远程命令执行漏洞☆58Apr 29, 2019Updated 6 years ago
- Parser utility to generate ASTs from PHP source code suitable to be processed by Joern.☆37Apr 21, 2020Updated 5 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- 一个用于识别目标网站是否采用Struts2框架开发的工具demo☆163Jan 23, 2018Updated 8 years ago
- Struts2-045 Scanner☆75Jun 3, 2017Updated 8 years ago
- 扫描常用服务器漏洞☆12Nov 5, 2017Updated 8 years ago
- ZZCMS v8.2-重装GETSHELL工具☆11May 8, 2018Updated 7 years ago
- Knowledge Base 慢雾安全团队知识库☆29Oct 22, 2019Updated 6 years ago
- A curated list of audit rules which extract from Source Code Auditing tools.☆15Feb 19, 2020Updated 6 years ago
- Dump WiFi passwords on Windows 10☆23Jan 25, 2018Updated 8 years ago
- ☆21May 10, 2017Updated 8 years ago
- ☆715Jan 4, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- 自动化检测页面是否存在XSS和CSRF漏洞的浏览器插件(A plugin for browser that checks automatically whether a page haves XSS and CSRF vulnerabilities)☆140Oct 21, 2018Updated 7 years ago
- ☆17Oct 17, 2018Updated 7 years ago
- 被动式漏洞扫描系统☆872Nov 1, 2017Updated 8 years ago
- 用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆866Jul 21, 2019Updated 6 years ago
- Collection of my test rules and Submissions to Emerging-Sigs☆11Apr 22, 2016Updated 9 years ago
- ☆29May 16, 2019Updated 6 years ago
- Manage your website via terminal☆424May 29, 2021Updated 4 years ago
- Solana Arbitrage Bot on Pump Swap, Raydium, Orca, Meteora swap program with rust language☆489Jan 26, 2026Updated 2 months ago
- GitLeak 是一个从 Github 上查找密码信息的小工具☆128May 15, 2018Updated 7 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- a plenty of poc based on python☆290Jun 10, 2017Updated 8 years ago
- Log4j_dos_CVE-2021-45105☆13Dec 19, 2021Updated 4 years ago
- DOOM是在thorn上实现的分布式任务分发的ip端口漏洞扫描器☆136Dec 1, 2015Updated 10 years ago
- 漏洞扫描：st2、tomcat、未授权访问等等☆288Apr 26, 2019Updated 6 years ago
- Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications (NDSS 2022)☆27Feb 14, 2024Updated 2 years ago
- 目标系统信息收集组件☆12Feb 23, 2015Updated 11 years ago
- ☆26Apr 29, 2017Updated 8 years ago
- 本项目仅用于记录团队内部分享议题及一些大事件，记录团队成长的过程。☆10Apr 2, 2019Updated 6 years ago
- all 4.4 ubuntu aws instances are vulnerable☆67Mar 17, 2018Updated 8 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- A domain searcher named GoogleSSLdomainFinder - 基于谷歌SSL透明证书的子域名查询工具☆185Feb 1, 2018Updated 8 years ago
- 自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch)，包含未授权访问及常规弱口令检测☆568Dec 1, 2017Updated 8 years ago
- Exploiting Edge's read:// urlhandler☆15Oct 23, 2021Updated 4 years ago
- JAVA Vul Code JAVA常见漏洞与防御代码示例☆10Sep 18, 2018Updated 7 years ago
- ☆21Oct 2, 2018Updated 7 years ago
- 免杀webshell☆37Jun 21, 2020Updated 5 years ago
- Java serialization brute force attack tool.☆123Aug 18, 2017Updated 8 years ago