mdshahroufbd,Mohammad Shahrouf,github

10degres.net

http://10degres.net

advanced-sql-injection-scanner

Ivan Ricart Borges - Test for didactic purposes of web pages vulnerables to SQL injection using dbo database user with xp_cmdshell execution permissions. Using patterns from Internet search engines to extract potentially vulnerable web addresses and test them by changing the GET parameters using invalid Transact-SQL conversion function to cause through unhandled errors by IIS web server to show critical information. If certain features are given and using advanced injection techniques a malicious attacker could gain control of the entire system by executing shell commands in the SQL database engine.

android_guides

Extensive Open-Source Guides for Android Developers

antiddos-system

🛡️⚔️ Protect your web app from DDOS attack or the Dead Ping + CAPTCHA VERIFICATION in one line!

aws-scanner

Scans a list of websites for Cloudfront or S3 Buckets

cloudflair

🔎 Find origin servers of websites behind by CloudFlare using Internet-wide scan data from Censys.

cmsscan

CMS Scanner: Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues

cssess

JS tool to scan websites for unused CSS selectors

electron

:electron: Build cross-platform desktop apps with JavaScript, HTML, and CSS

ip_scanner

A simple web-based IP tracker.

list

Usefull List

mangekyou-scanner

# Mangekyou-Scanner Requirements: 1. Python 3 2. socket module (If inbuilt is not in your machine) 3. sys module (If inbuilt is not in your machine) 4. time (If inbuilt is not in your machine) 5. datetime (If inbuilt is not in your machine) 6. threading (If inbuilt is not in your machine) How to run the script: 1.First of all navigate to the directory in which the script is eg. cd /Downloads/ 2.Unzip the folder 3.Go into unzip directory of Mangekyou-Scanner eg. cd /Downloads/Mangekyou-Sanner 4.Start the script eg. ./Mangekyou-Scanner.py Description about Script: When you run the script you see 3 options: 1. Simple Port Scan 2. Ultimate Mode: Port Scan + Banner Grabbing (Normal Speed Scan) [Recommended] 3. Advanced Mode: Port Scan + Banner Grabbing (Fast speed Scan) [Not Recommended] 1st option just scan for open port. 2nd option show open port and give information of that open port. 3rd option do same like 2nd option but in 3rd option speed increase of scanning ports but i not recommended to use it because some time server blocks your ip because of using 3rd option advanced mode and you get error of 'Timed out' i suggest to use ULtimate mode. When you select any option from above 3 option then script ask you that you want to scan select port numbers or scan all ports if you want to scan selected ports then write ports number otherwise click enter to scan all default ports. Please be patient if you select all defaults ports for scan. Credits: I like to thanks violent python book, null bytes, hackingvision and furas.pl who help me in this script Information of People who help me: 1. Violent Python Cookbook Penetration Engineers 2. Hacking vision: website: www.hackingvision.com I suggest to all once visit the hacking vision website. That website is best for pentester and programmers. I learn many things from that website 3. Null bytes: website: www.null-byte.wonderhowto.com I suggest to all once visit the hacking vision website. That website is best for pentester and programmers. 4. furas.pl website: www.blog.furas.pl website is in work and furas.pl help me alot in this script he is nice programmer and he is working on his blog at now he going to start tutorial of programming i will suggest you to visit his blog. Once time again i thanks to 4 of you to help me.

material-design-lite

Material Design Components in HTML/CSS/JS

minesweeper

Scans websites; detects bombs

mixed-content-scan

Scan your HTTPS-enabled website for Mixed Content

multiportscan

Forked php program, multiple port scanner

mysqlimpulse

This is a PHP application to access the MySqlDataBase having inbuilt safety check for sql injection and cache management(product by Sahasrangshu)

netsparker-scan

A script to fire a Netsparker scan and periodically poll its progress, and report severity via the Netsparker API

nginx-lua-anti-ddos

A Anti-DDoS script to protect Nginx web servers using Lua with a HTML Javascript based authentication puzzle inspired by Cloudflare I am under attack mode an Anti-DDoS authentication page protect yourself from every attack type All Layer 7 Attacks Mitigating Historic Attacks DoS DoS Implications DDoS All Brute Force Attacks Zero day exploits Social Engineering Rainbow Tables Password Cracking Tools Password Lists Dictionary Attacks Time Delay Any Hosting Provider Any CMS or Custom Website Unlimited Attempt Frequency Search Attacks HTTP Basic Authentication HTTP Digest Authentication HTML Form Based Authentication Mask Attacks Rule-Based Search Attacks Combinator Attacks Botnet Attacks Unauthorized IPs IP Whitelisting Bruter THC Hydra John the Ripper Brutus Ophcrack unauthorized logins Injection Broken Authentication and Session Management Sensitive Data Exposure XML External Entities (XXE) Broken Access Control Security Misconfiguration Cross-Site Scripting (XSS) Insecure Deserialization Using Components with Known Vulnerabilities Insufficient Logging & Monitoring Drupal WordPress Joomla Flash Magento PHP Plone WHMCS Atlassian Products malicious traffic Adult video script avs KVS Kernel Video Sharing Clip Bucket Tube sites Content Management Systems Social networks scripts backends proxy proxies PHP Python Porn sites xxx adult gaming networks servers sites forums vbulletin phpbb mybb smf simple machines forum xenforo web hosting video streaming buffering ldap upstream downstream download upload rtmp vod video over dl hls dash hds mss livestream drm mp4 mp3 swf css js html php python sex m3u zip rar archive compressed mitigation code source sourcecode

node-libnmap

API to access nmap from node.js

online-banking-system-1

The project’s primary goals consist of: A robust and effective web based online banking system. Extending functionality without compromising the security. Personal banking services that gives you complete control over all your banking demands online. Simple and easy user interface to work with. Online Banking features: Registration for online banking by Admin. Adding Beneficiary account by customer. Transferring amount to the beneficiary added by customer. Staff must approve for beneficiary activation before it can be used for transferring funds. Customer gets to know his last login date and time each time he logs in. Customer can check last 10 transactions made with their account. Customer can check their account statement within a date range. Customer can request for ATM and Cheque Book. Staff will approve requests for ATM card and cheque book. Admin can add/edit/delete customer as well as staff. All three of them(customer, staff & admin) can change their password. Staff and Admin Login pages are hidden from customer for security purpose. Security: Each and every input is passed through mysql_real_escape_string() to remove special characters from the string so that user can’t submit arbitrary input. It protects from attacks like Sql Injection and Cross Site Scripting(XSS). Passwords are encrypted with SHA- 1 hashing algorithm and then stored in database. Passwords are stored as encrypted hashes with an additional random salt for added security. Note: If we talk about security,above mentioned points would provide no security at all but it will work for beginners. Being into web app pentesting,I very well know this project will not be considered secure. It needs atleast a more effective filtering mechanism, better hashing algorithm, a better salting procedure for storing passwords and some other things too. Database: The database contains customer, staff & admin tables. Each customer has its own virtual passbook linked with its account number. Staff, customer and, admin have their details and password in their respective tables with all the details. A separate table for beneficiary is included in the database. A table for cheque book and ATM requests is included. This project is divided into three hierarchical parts: The index page for the customer login. A hidden staff login page. A hidden admin login page. Usage: 1.Install XAMPP or something similar. 2.Copy all the files to c:/xampp/htdocs/banking/ 3.Create a db named as 'bnak_db' and import the bank_db.sql from phpMyAdmin. 4.change the password in _inc/dbconn.php file accordingly. 5.visit localhost/banking (customer index page) 6.visit localhost/banking/adminlogin.php (admin login) 7.visit the localhost/banking/staff_login.php (staff login)

mdshahroufbd Goto Github PK

Mohammad Shahrouf's Projects

Recommend Projects

Recommend Topics

Recommend Org