CVE-2020-7355

Damn Vulnerable Application Scanner

Damn Vulnerable Application Scanner (DVAS) This repository contains a collection of web-based (vulnerable) security scanners, including (but not limited to) the vulnerabilities from "Never Trust Your Victim: Weaponizing Vulnerabilities in Security Scanners" [1] DVAS also contains a simulation of CVE-2020-7354 and CVE-2020-7355 for Metasploit Pro [2] Getting Started

An HTTP Response fuzzer to find Vulnerabilities in Security Scanners

RevOK We see the targets of our scan as passive entities, and this leads to underestimating the risk of performing a scan However, the tools we use to scan are not immune to vulnerabilities Testing these bugs is often hard since they require a dedicated testing infrastructure: RevOK supports analysts by simulating a malicious target and by tracking data in the security scanne