mutillidae
faraday
| mutillidae | faraday | |
|---|---|---|
| 5 | 8 | |
| 1,176 | 4,624 | |
| - | 1.4% | |
| 7.8 | 5.0 | |
| 3 months ago | 5 days ago | |
| PHP | Python | |
| GNU General Public License v3.0 only | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
mutillidae
-
If you're looking for resources pertaining to hands-on practical demonstrations of learned skills and tools/techniques, look no further.
There's also a bunch of intentionally vulnerable Webapps and VMs aimed at demonstrating potential footholds and common exploits leading to owning of the host including but not limited to: bWAPP, Damn Vulnerable Web App, WebGoat, Metasploitable 3, Mutillidae, Juice Shop
- Web App Pentesting Course
-
What is the best linux distro for begginers?
I would recommend getting an Ubuntu server VM and installing Mutillidae (and/or OWASP Juice Shop). First learn how to configure and harden your Ubuntu server. Then add it to an internal network with a few other VMs and examine what happens, how they communicate, etc. Then open up your Kali and have some fun with Mutillidae or Juice Shop.
-
Teaching question: making an unsafe site available to students?
We use OWASPs Mutillidae.
-
Question
The WAHH contains a pretty solid baseline for understanding web vulnerabilities, but the latest version is from 2011 so it's missing a decade of new techniques. It's not a terrible place to start since a lot of the fundamentals haven't changed in a while, but you'll definitely want to look into things like (as mentioned in another comment) the Web Security Academy as a next step. Other fun options are the OWASP Juice Shop and Mutillidae applications.
faraday
-
Penetration Testing Report
or you can also use our open source version: https://github.com/infobyte/faraday
-
Vulnerability Scanner
you can try www.faradaysec.com to manage and automate scans of different tools
-
How does the periodic cyber security report should look like?
maybe you could try Faraday (www.faradaysec.com), you can import your tools and generate reports
-
Merge vulnerability discoveries with manual vulnerability assessment
We produce a platform to do basically all of this, we even have an Open Source tier that might cover most of your needs. Check faraday if it fits your bill. Reporting capabilities, integration with ticketing systems such as JIRA, ServiceNow and Gitlab are in our paid tier.
-
What vulnerability management tool for modern DevSecOps?
We just released the new community version of faraday, I think we cover most of your workflow needs. We are also releasing a number of new plugins, like prowler and trivy in the next few days.
-
Recommendation for Vulnerability Management Solution
Faraday: https://github.com/infobyte/faraday
-
django-DefectDojo VS faraday - a user suggested alternative
2 projects | 5 Apr 2022
Similar product
-
Awesome Penetration Testing
Faraday - Multiuser integrated pentesting environment for red teams performing cooperative penetration tests, security audits, and risk assessments.
What are some alternatives?
DVWA - Damn Vulnerable Web Application (DVWA)
django-DefectDojo - DevSecOps, ASPM, Vulnerability Management. All on one platform.
juice-shop - OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
opencve - CVE Alerting Platform
Open-Source-Security-Guide - Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.
Metasploit - Metasploit Framework
flexio-web-app - Flex.io Web App
cervantes - Cervantes is an open-source, collaborative platform designed specifically for pentesters and red teams. It serves as a comprehensive management tool, streamlining the organization of projects, clients, vulnerabilities, and reports in a single, centralized location.
WhatWeb - Next generation web scanner
evilgrade - Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates.
laravel-electron - Making Laravel desktop application using Electron Js
WebMap - WebMap-Nmap Web Dashboard and Reporting