Perl

OpenFire AdminFinder is a legacy Perl utility for discovering common administrative login paths on web applications developed in ASP, CFM, PHP, or Java. It analyzes responses for login-form indicators but does not bypass authentication or confirm vulnerabilities, necessitating manual verification of results. Designed for ethical penetration testing, it requires explicit permissions to run and should be used with caution due to potential false positives.

ASN.1 Template is a Perl-based tool designed to convert DER or PEM encoded ASN.1 structures into a human-readable textual format suitable for modifications and subsequent encoding via OpenSSL's ASN1_generate_nconf(3) function. Key features include support for processing multiple concatenated ASN.1 structures and options for simplified labeling and unwrapping of top-level sequences, enabling streamlined ASN.1 structure manipulation without the need for compilation.

The Admin Control Panel Finder is a Perl-based tool designed to identify potential admin login paths on websites, catering primarily to developers and security professionals for authorized testing. It automatically checks common admin panel URLs across various web technologies, such as PHP and ASP, and employs keyword detection for typical login fields, making it a lightweight and beginner-friendly tool for ethical hacking and cybersecurity education.

Parrot Recon is an automation script designed for reconnaissance in bug bounty scenarios, chaining multiple enumeration and vulnerability scanning tools into a single execution. It supports a range of scan types, including API and web scanning, and outputs comprehensive results to a specified directory. Notable features include support for various data sources such as Postman collections, extensive built-in scan capabilities, and the ability to run multiple scans sequentially while handling missing tools gracefully.

FazScan is a versatile vulnerability scanning and penetration testing tool implemented in Perl, designed to assess various web vulnerabilities, including SQL injection and CMS-specific weaknesses. With 18 distinct options, it enables users to perform automated scans for common vulnerabilities, detect content management systems, bypass WAF protection, and even conduct denial of service attacks. Its cross-platform compatibility allows for deployment on Linux, Windows, and Android systems.

XAttacker is a web vulnerability scanner designed to automate the detection of security weaknesses in web applications. Its primary use case is to identify vulnerabilities such as SQL injection and cross-site scripting (XSS) through a user-friendly interface and customizable attack payloads. Notable features include multi-threaded scanning, a comprehensive report generator, and support for various web technologies.

Spellbook is a micro-framework designed for the rapid development of reusable security tools using a flow-based programming (FBP) paradigm. It allows users to create and utilize various security modules, such as exploit testing and advisory lookups, through a command-line interface that supports operations like module searching and execution. Notable features include its ability to handle multiple exploit modules and a Docker integration for containerized deployment.

UBERSCAN is a security tool designed for penetration testing of servers, routers, and IoT devices, aimed at showcasing vulnerabilities, including susceptibility to threats like the Mirai virus. It features various scanning modes (SSH, Telnet) and options for brute-forcing credentials using user and password files. Primarily intended for ethical hacking purposes, it encourages users to responsibly report any identified vulnerabilities.

Image Payload Creating/Injecting tools

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter