Search Results for "command injection"

...A web application firewall helps protect web apps by filtering and monitoring HTTP traffic between a web application and the Internet. It typically protects web apps from attacks such as SQL injection, XSS, code injection, os command injection, CRLF injection, LDAP injection, XPath injection, RCE, XXE, SSRF, path traversal, backdoor, brute force, HTTP-flood, bot abuse, among others. By deploying a WAF in front of a web application, a shield is placed between the web application and the Internet. While a proxy server protects a client machine’s identity by using an intermediary, a WAF is a type of reverse-proxy, protecting the server from exposure by having clients pass through the WAF before reaching the server. ...

Emod Mouse Macro stands out as a premier, free solution for recording keyboard and mouse sequences. Unlike traditional macro tools that force you to manually input X and Y coordinates and tedious command strings, Emod Mouse Macro offers a more intuitive approach by capturing your actual movements, clicks, and keystrokes in real time. Beyond its advanced recording capabilities, Emod Mouse Macro provides the flexibility to save your custom scripts, allowing you to build a library and load...

The OWASP ModSecurity Core Rule Set (CRS) is a curated, generic Web Application Firewall rule set that detects and blocks common attack categories across most web apps. It focuses on broad protection—SQL injection, cross-site scripting, local/remote file inclusion, command injection, and protocol violations—without requiring app-specific knowledge. Rules are organized into paranoia levels so operators can tune detection aggressiveness and balance false positives against coverage. An anomaly-scoring model accumulates rule hits per request, enabling nuanced blocking thresholds and easier incident triage. ...

The Mist browser is the tool of choice to browse and use Ðapps. If you want to install the app from a pre-built version on the release page, you can simply run the executable after download. For updating, simply download the new version and copy it over the old one (keep a backup of the old one if you want to be sure). In order to install from .zip files, please install libgconf2-4 first. Once a Mist version is released the Meteor frontend part is bundled using the meteor-build-client npm...

iSCSIsim is a powerful generic test tool for iSCSI targets. Its capabilities include SCSI command injection, error insertion, and recovery testing: all with built-in validation of test results.

Hexadecimal and raw packet injector and sniffer. Can be easily combined with other tools to provide a powerful cmdline framework for raw network access.

bWAPP, or a buggy web application, is a free and open source deliberately insecure web application. bWAPP helps security enthusiasts, developers and students to discover and to prevent web vulnerabilities. bWAPP prepares one to conduct successful penetration testing and ethical hacking projects. What makes bWAPP so unique? Well, it has over 100 web bugs! It covers all major known web vulnerabilities, including all risks from the OWASP Top 10 project. The focus is not just on one specific...

NESRomTool is a command-line based utility for extraction and injection of Nintendo ROM data from .nes files. It currently works with program and sprite data and can preview individual sprites in the terminal window.