BlackHat Arsenal USA 2018 ToolsWatch黑客工具库

水深无声 2022-05-15 01:54 183阅读 0赞

# Black Hat Arsenal USA 2018 — The w0w lineup #

After the [huge success of Black Hat Arsenal USA 2017][], [@toolswatch][toolswatch] has now announced the list of tools selected for **Black Hat Arsenal USA 2018.**

This time there were a huge number of proposals than expected, so the Arsenal team had a tough time selecting the tools.

> **NOTE:** If you have submitted a proposal and didn’t get selected, don’t worry. Please do submit it again for Black Hat Arsenal EU 2018 / ASIA 2019. The rejected tools don’t necessarily mean that they aren’t good. Also the rejected tools are on the priority list for consideration in upcoming Black Hat Arsenal events.

Some of the selected tools are already present on GitHub and some are yet to be uploaded. This article contains the links to their respective repositories. The tools are arranged according to their tracks. If you like the tool, go to its repository and **click Watch** to keep updated on the latest commits and pushes.

**Some tools will be updated during/after the Arsenal event. Links to the GitHub repositories of those tools will be eventually updated in this article.**

**If you feel that this article is missing links to some Arsenal tools hosted on GitHub, please comment so that it will updated.**

**NOTE:** Arsenal Theater Demos are denoted using the Projector emoji —

### Android, iOS and Mobile Hacking ###

*  **Damn Vulnerable iOS App: Swift Edition **  
    [https://github.com/prateek147/DVIA-v2][https_github.com_prateek147_DVIA-v2]  
    **Presenter:** Prateek Gianchandani ([@prateekg147][prateekg147])

### Code Assessment ###

*  **OWASP Dependency-Check **  
    [https://github.com/jeremylong/DependencyCheck][https_github.com_jeremylong_DependencyCheck]  
    **Presenter:** Jeremy Long ([@ctxt][ctxt])
 *  **Puma Scan **  
    [https://github.com/pumasecurity/puma-scan][https_github.com_pumasecurity_puma-scan]  
    **Twitter: **([@puma\_scan][puma_scan])  
    **Presenter:** Eric Johnson ([@emjohn20][emjohn20])

### Cryptography ###

*  **DeepViolet: SSL/TLS Scanning API & Tools **  
    [https://github.com/spoofzu/DeepViolet][https_github.com_spoofzu_DeepViolet]  
    **Presenter:** Milton Smith ([@spoofzu][spoofzu])

### Data Forensics and Incident Response ###

*  **Bro: Do You Bro? Beginner to Expert **  
    [https://github.com/bro/bro][https_github.com_bro_bro]  
    **Presenter:** Seth Hall ([@remor][remor])
 *  **CyBot: Open-Source Threat Intelligence Chat Bot (Full Circle)**  
    [https://github.com/CylanceSPEAR/CyBot][https_github.com_CylanceSPEAR_CyBot]  
    **Presenter:** Tony Lee
 *  **LogonTracer **  
    [https://github.com/JPCERTCC/LogonTracer][https_github.com_JPCERTCC_LogonTracer]  
    **Presenters:** Shusei Tomonaga ([@shu\_tom][shu_tom]), Tomoaki Tani
 *  **rastrea2r (reloaded!): Collecting & Hunting for IOCs with Gusto and Style **  
    [https://github.com/rastrea2r/rastrea2r][https_github.com_rastrea2r_rastrea2r]  
    **Presenters:** Ismael Valenzuela ([@aboutsecurity][aboutsecurity]), Sudheendra Bhat
 *  **RedHunt OS (VM): A Virtual Machine for Adversary Emulation and Threat Hunting **  
    [https://github.com/redhuntlabs/RedHunt-OS][https_github.com_redhuntlabs_RedHunt-OS]  
    **Presenter:** Sudhanshu Chauhan ([@Sudhanshu\_C][Sudhanshu_C])

### Exploitation and Ethical Hacking ###

*  **AVET: AntiVirus Evasion Tool **  
    [https://github.com/govolution/avet][https_github.com_govolution_avet]  
    **Presenter:** Daniel Sauder ([@DanielX4v3r][DanielX4v3r])
 *  **DSP: Docker Security Playground **  
    [https://github.com/giper45/DockerSecurityPlayground][https_github.com_giper45_DockerSecurityPlayground]  
    **Presenter:** Simon Pietro Romano ([@spromano][spromano])
 *  **hideNsneak: An Attack Obfuscation Framework **  
    [https://github.com/rmikehodges/hideNsneak][https_github.com_rmikehodges_hideNsneak]  
    **Presenters:** Michelle Hodges, Mike Hodges ([@rmikehodges][rmikehodges])
 *  **Merlin **  
    [https://github.com/Ne0nd0g/merlin][https_github.com_Ne0nd0g_merlin]  
    **Presenter: **Russel Van Tuyl ([@Ne0nd0g][Ne0nd0g])
 *  **RouterSploit **  
    [https://github.com/threat9/routersploit][https_github.com_threat9_routersploit]  
    **Twitter:** [@routersploit][routersploit]  
    **Presenters: **Blane Cordes, Marcin Bury

### Hardware/Embedded ###

*  **ChipWhisperer **  
    [https://github.com/newaetech/chipwhisperer][https_github.com_newaetech_chipwhisperer]  
    **Presenter:** Colin O’Flynn ([@colinoflynn][colinoflynn])
 *  **JTAGulator: Uncovering the Achilles Heel of Hardware Security**  
    [https://github.com/grandideastudio/jtagulator][https_github.com_grandideastudio_jtagulator]  
    **Presenter:** Joe Grand ([@joegrand][joegrand])
 *  **Micro-Renovator: Bringing Processor Firmware up to Code **  
    [https://github.com/syncsrc/MicroRenovator][https_github.com_syncsrc_MicroRenovator]  
    **Presenter:** Matt King ([@syncsrc][syncsrc])
 *  **TumbleRF: RF Fuzzing Made Easy **  
    [https://github.com/riverloopsec/tumblerf][https_github.com_riverloopsec_tumblerf]  
    **Presenters: **Matt Knight ([@embeddedsec][embeddedsec])
 *  **Walrus: Make the Most of Your Card Cloning Devices **  
    [https://github.com/TeamWalrus/Walrus][https_github.com_TeamWalrus_Walrus]  
    **Presenters: **Daniel Underhay, Matthew Daley

### Internet of Things ###

*  **An Extensible Dynamic Analysis Framework for IoT Devices **  
    [https://github.com/sycurelab/DECAF][https_github.com_sycurelab_DECAF]  
    **Presenters:** Heng Yin, Xunchao Hu, Yaowen Zheng
 *  **BLE CTF Project **  
    [https://github.com/hackgnar/ble\_ctf][https_github.com_hackgnar_ble_ctf]  
    **Presenter:** Ryan Holeman ([@hackgnar][hackgnar])
 *  **WHID Injector and WHID Elite: A New Generation of HID Offensive Devices **  
    [https://github.com/whid-injector/WHID][https_github.com_whid-injector_WHID]  
    **Presenter: **Luca Bongiorni ([@LucaBongiorni][LucaBongiorni])

### Malware Defense ###

*  **Advanced Deep Learning Analytic Platform Made Easy for Every Security Researcher **  
    [https://github.com/intel/Resilient-ML-Research-Platform][https_github.com_intel_Resilient-ML-Research-Platform]  
    **Presenters:** Evan Yang, Li Chen
 *  **EKTotal **  
    [https://github.com/nao-sec/ektotal][https_github.com_nao-sec_ektotal]  
    **Presenters:** Keita Nomura, Rintaro Koike
 *  **Firmware Audit: Platform Firmware Security Automation for Blue Teams and DFIR **  
    [https://github.com/PreOS-Security/fwaudit][https_github.com_PreOS-Security_fwaudit]  
    **Presenters:** Lee Fisher ([@LeeFisher\_PreOS][LeeFisher_PreOS]), Paul English
 *  **MaliceIO **  
    [https://github.com/maliceio/malice][https_github.com_maliceio_malice]  
    **Twitter:** [@maliceio][maliceio]  
    **Presenter:** Josh Maine
 *  **Objective-See’s MacOS Security Tools**  
    [https://github.com/objective-see][https_github.com_objective-see]  
    **Twitter:** [@objective\_see][objective_see]  
    **Presenter:** Patrick Wardle ([@patrickwardle][patrickwardle])

### Malware Offense ###

*  **BloodHound 1.5 **  
    [https://github.com/BloodHoundAD/BloodHound][https_github.com_BloodHoundAD_BloodHound]  
    **Presenters: **Andy Robbins ([@\_wald0][wald0]), Rohan Vazarkar ([@CptJesus][CptJesus])

### Network Attacks ###

*  **Armory **  
    [https://github.com/depthsecurity/armory][https_github.com_depthsecurity_armory]  
    **Presenter:** Daniel Lawson ([@fang0654][fang0654])
 *  **Chiron: An Advanced IPv6 Security Assessment and Penetration Testing Framework **  
    [https://github.com/aatlasis/Chiron][https_github.com_aatlasis_Chiron]  
    **Presenter:** Antonios Atlasis ([@AntoniosAtlasis][AntoniosAtlasis])
 *  **DELTA: SDN Security Evaluation Framework **  
    [https://github.com/OpenNetworkingFoundation/DELTA][https_github.com_OpenNetworkingFoundation_DELTA]  
    **Presenters: **Jinwoo Kim, Seungsoo Lee, Seungwon Shin, Seungwon Woo
 *  **Mallet: An Intercepting Proxy for Arbitrary Protocols **  
    [https://github.com/sensepost/mallet][https_github.com_sensepost_mallet]  
    **Presenter: **Rogan Dawes ([@RoganDawes][RoganDawes])
 *  **PowerUpSQL: A PowerShell Toolkit for Attacking SQL Servers in Enterprise Environments **  
    [https://github.com/NetSPI/PowerUpSQL][https_github.com_NetSPI_PowerUpSQL]  
    **Presenters:** Antti Rantasaari, Scott Sutherland ([@\_nullbind][nullbind])
 *   **WarBerryPi **  
    [https://github.com/secgroundzero/warberry][https_github.com_secgroundzero_warberry]  
    **Presenters:** Stella Constantinou, Yiannis Ioannides

### Network Defense ###

*  **ANWI (All New Wireless IDS): The $5 WIDS **  
    [https://github.com/SanketKarpe/anwi][https_github.com_SanketKarpe_anwi]  
    **Presenters: **Rishikesh Bhide, Sanket Karpe
 *  **CHIRON: Home-Based Network Analytics & Machine Learning Threat Detection Framework **  
    [https://github.com/jzadeh/chiron-elk][https_github.com_jzadeh_chiron-elk]  
    **Presenters:** Joseph Zadeh ([@JosephZadeh][JosephZadeh]), Rod Soto ([@rodsoto][rodsoto])
 *  **Cloud Security Suite: One Stop Tool for AWS/GCP/Azure Security Audit **  
    [https://github.com/SecurityFTW/cs-suite][https_github.com_SecurityFTW_cs-suite]  
    **Twitter:** [@CS\_Suite][CS_Suite]  
    **Presenters:** Divya John, Jayesh Chauhan ([@jayeshsch][jayeshsch]), Shivankar Madaan ([@shivankarmadaan][shivankarmadaan])
 *  **DejaVu: An Open Source Deception Framework **  
    [https://github.com/bhdresh/Dejavu][https_github.com_bhdresh_Dejavu]  
    **Presenters:** Bhadreshkumar Patel ([@bhdresh][bhdresh]), Harish Ramadoss ([@hramados][hramados])

### OSINT — Open Source Intelligence ###

*  **DataSploit 2.0 **  
    [https://github.com/DataSploit/datasploit][https_github.com_DataSploit_datasploit]  
    **Twitter:** [@datasploit][datasploit]  
    **Presenter:** Shubham Mittal ([@upgoingstar][upgoingstar])
 *   **Dradis Framework: Learn How to Cut Your Reporting Time in Half **  
    [https://github.com/dradis/dradis-ce][https_github.com_dradis_dradis-ce]  
    **Twitter:** [@dradisfw][dradisfw]  
    **Presenter:** Daniel Martin ([@etdsoft][etdsoft])

### Reverse Engineering ###

*  **Snake: The Malware Storage Zoo**  
    [https://github.com/countercept/snake][https_github.com_countercept_snake]  
    **Presenter:** Alex Kornitzer ([@AlexKornitzer][AlexKornitzer])

### Smart Grid / Industrial Security ###

*   **GRFICS: A Graphical Realism Framework for Industrial Control Simulations **  
    [https://github.com/djformby/GRFICS][https_github.com_djformby_GRFICS]  
    **Presenter:** David Formby

### Vulnerability Assessment ###

*   **Adversarial Robustness Toolbox for Machine Learning Models**  
    [https://github.com/IBM/adversarial-robustness-toolbox][https_github.com_IBM_adversarial-robustness-toolbox]  
    **Presenter:** Irina Nicolae
 *  **Android Dynamic Analysis Tool (ADA) **  
    [https://github.com/ANELKAOS/ada][https_github.com_ANELKAOS_ada]  
    **Presenter:** Anelkaos ([@ANELKAOS1][ANELKAOS1])
 *   **Archery: Open Source Vulnerability Assessment and Management **  
    [https://github.com/archerysec/archerysec][https_github.com_archerysec_archerysec]  
    **Twitter:** [@ArcherySec][ArcherySec]  
    **Presenter:** Anand Tiwari ([@anandtiwarics][anandtiwarics])
 *  **boofuzz **  
    [https://github.com/jtpereyda/boofuzz][https_github.com_jtpereyda_boofuzz]  
    **Presenter: **Joshua Pereyda ([@jtpereyda][jtpereyda])
 *  **BTA **  
    [https://github.com/airbus-seclab/bta][https_github.com_airbus-seclab_bta]  
    **Presenter: **Joffrey Czarny ([@\_Sn0rkY][Sn0rkY])
 *  **Deep Exploit **  
    [https://github.com/13o-bbr-bbq/machine\_learning\_security/tree/master/DeepExploit][https_github.com_13o-bbr-bbq_machine_learning_security_tree_master_DeepExploit]  
    **Presenter:** Isao Takaesu ([@bbr\_bbq][bbr_bbq])
 *  **Halcyon IDE: For Nmap Script Developers **  
    [https://github.com/s4n7h0/Halcyon][https_github.com_s4n7h0_Halcyon]  
    **Presenter:** Sanoop Thomas ([@s4n7h0][s4n7h0])
 *  **SimpleRisk **  
    [https://github.com/simplerisk][https_github.com_simplerisk]  
    **Twitter:** [@simpleriskfree][simpleriskfree]  
    **Presenter:** Josh Sokol ([@joshsokol][joshsokol])
 *  **TROMMEL **  
    [https://github.com/CERTCC/trommel][https_github.com_CERTCC_trommel]  
    **Presenter:** Kyle O’Meara

### Web AppSec ###

*  **A Look at ModSec 3.0 for NGINX: A Software Web Application Firewall **  
    [https://github.com/SpiderLabs/ModSecurity][https_github.com_SpiderLabs_ModSecurity]  
    **Presenter:** Kevin Jones
 *  **Astra: Automated Security Testing For REST APIs **  
    [https://github.com/flipkart-incubator/Astra][https_github.com_flipkart-incubator_Astra]  
    **Presenters:** Ankur Bhargava ([@\_AnkurB][AnkurB]), Sagar Popat ([@popat\_sagar][popat_sagar])
 *  **Burp Replicator: Automate Reproduction of Complex Vulnerabilities **  
    [https://github.com/PortSwigger/replicator][https_github.com_PortSwigger_replicator]  
    **Presenter:** Paul Johnston ([@paulpaj][paulpaj])
 *  **OWASP Offensive Web Testing Framework **  
    [https://github.com/owtf/owtf][https_github.com_owtf_owtf]  
    **Twitter:** [@owtfp][owtfp]  
    **Presenter:** Viyat Bhalodia ([@viyat][viyat])
 *  **OWASP JoomScan Project **  
    [https://github.com/rezasp/joomscan][https_github.com_rezasp_joomscan]  
    **Twitter:** [@OWASP\_JoomScan][OWASP_JoomScan] ‏  
    **Presenters:** Babak Amin Azad, Mohammad Reza Espargham ([@rezesp][rezesp]) , Vahid Behzadan ([@vbehzadan][vbehzadan])
 *  **WSSAT **  
    [https://github.com/YalcinYolalan/WSSAT][https_github.com_YalcinYolalan_WSSAT]  
    **Presenters:** Mehmet Yalcin YOLALAN ([@yyolalan][yyolalan]), Salih TALAY

--------------------

If you haven’t looked at the selected tools, check the below embed to view the complete details of the tools and its presenters.

[huge success of Black Hat Arsenal USA 2017]: https://medium.com/hack-with-github/black-hat-arsenal-usa-2017-3fb5bd9b5cf2
[toolswatch]: https://twitter.com/ToolsWatch
[https_github.com_prateek147_DVIA-v2]: https://github.com/prateek147/DVIA-v2
[prateekg147]: http://twitter.com/prateekg147
[https_github.com_jeremylong_DependencyCheck]: https://github.com/jeremylong/DependencyCheck
[ctxt]: http://twitter.com/ctxt
[https_github.com_pumasecurity_puma-scan]: https://github.com/pumasecurity/puma-scan
[puma_scan]: http://twitter.com/puma_scan
[emjohn20]: http://twitter.com/emjohn20
[https_github.com_spoofzu_DeepViolet]: https://github.com/spoofzu/DeepViolet
[spoofzu]: http://twitter.com/spoofzu
[https_github.com_bro_bro]: https://github.com/bro/bro
[remor]: http://twitter.com/remor
[https_github.com_CylanceSPEAR_CyBot]: https://github.com/CylanceSPEAR/CyBot
[https_github.com_JPCERTCC_LogonTracer]: https://github.com/JPCERTCC/LogonTracer
[shu_tom]: http://twitter.com/shu_tom
[https_github.com_rastrea2r_rastrea2r]: https://github.com/rastrea2r/rastrea2r
[aboutsecurity]: http://twitter.com/aboutsecurity
[https_github.com_redhuntlabs_RedHunt-OS]: https://github.com/redhuntlabs/RedHunt-OS
[Sudhanshu_C]: http://twitter.com/Sudhanshu_C
[https_github.com_govolution_avet]: https://github.com/govolution/avet
[DanielX4v3r]: https://twitter.com/DanielX4v3r
[https_github.com_giper45_DockerSecurityPlayground]: https://github.com/giper45/DockerSecurityPlayground
[spromano]: http://twitter.com/spromano
[https_github.com_rmikehodges_hideNsneak]: https://github.com/rmikehodges/hideNsneak
[rmikehodges]: http://twitter.com/rmikehodges
[https_github.com_Ne0nd0g_merlin]: https://github.com/Ne0nd0g/merlin
[Ne0nd0g]: http://twitter.com/Ne0nd0g
[https_github.com_threat9_routersploit]: https://github.com/threat9/routersploit
[routersploit]: http://twitter.com/routersploit
[https_github.com_newaetech_chipwhisperer]: https://github.com/newaetech/chipwhisperer
[colinoflynn]: http://twitter.com/colinoflynn
[https_github.com_grandideastudio_jtagulator]: https://github.com/grandideastudio/jtagulator
[joegrand]: http://twitter.com/joegrand
[https_github.com_syncsrc_MicroRenovator]: https://github.com/syncsrc/MicroRenovator
[syncsrc]: http://twitter.com/syncsrc
[https_github.com_riverloopsec_tumblerf]: https://github.com/riverloopsec/tumblerf
[embeddedsec]: http://twitter.com/embeddedsec
[https_github.com_TeamWalrus_Walrus]: https://github.com/TeamWalrus/Walrus
[https_github.com_sycurelab_DECAF]: https://github.com/sycurelab/DECAF
[https_github.com_hackgnar_ble_ctf]: https://github.com/hackgnar/ble_ctf
[hackgnar]: http://twitter.com/hackgnar
[https_github.com_whid-injector_WHID]: https://github.com/whid-injector/WHID
[LucaBongiorni]: https://twitter.com/LucaBongiorni
[https_github.com_intel_Resilient-ML-Research-Platform]: https://github.com/intel/Resilient-ML-Research-Platform
[https_github.com_nao-sec_ektotal]: https://github.com/nao-sec/ektotal
[https_github.com_PreOS-Security_fwaudit]: https://github.com/PreOS-Security/fwaudit
[LeeFisher_PreOS]: http://twitter.com/LeeFisher_PreOS
[https_github.com_maliceio_malice]: https://github.com/maliceio/malice
[maliceio]: http://twitter.com/maliceio
[https_github.com_objective-see]: https://github.com/objective-see
[objective_see]: http://twitter.com/objective_see
[patrickwardle]: http://twitter.com/patrickwardle
[https_github.com_BloodHoundAD_BloodHound]: https://github.com/BloodHoundAD/BloodHound
[wald0]: http://twitter.com/_wald0
[CptJesus]: http://twitter.com/CptJesus
[https_github.com_depthsecurity_armory]: https://github.com/depthsecurity/armory
[fang0654]: http://twitter.com/fang0654
[https_github.com_aatlasis_Chiron]: https://github.com/aatlasis/Chiron
[AntoniosAtlasis]: http://twitter.com/AntoniosAtlasis
[https_github.com_OpenNetworkingFoundation_DELTA]: https://github.com/OpenNetworkingFoundation/DELTA
[https_github.com_sensepost_mallet]: https://github.com/sensepost/mallet
[RoganDawes]: http://twitter.com/RoganDawes
[https_github.com_NetSPI_PowerUpSQL]: https://github.com/NetSPI/PowerUpSQL
[nullbind]: http://twitter.com/_nullbind
[https_github.com_secgroundzero_warberry]: https://github.com/secgroundzero/warberry
[https_github.com_SanketKarpe_anwi]: https://github.com/SanketKarpe/anwi
[https_github.com_jzadeh_chiron-elk]: https://github.com/jzadeh/chiron-elk
[JosephZadeh]: http://twitter.com/JosephZadeh
[rodsoto]: http://twitter.com/rodsoto
[https_github.com_SecurityFTW_cs-suite]: https://github.com/SecurityFTW/cs-suite
[CS_Suite]: http://twitter.com/CS_Suite
[jayeshsch]: https://twitter.com/jayeshsch
[shivankarmadaan]: http://twitter.com/shivankarmadaan
[https_github.com_bhdresh_Dejavu]: https://github.com/bhdresh/Dejavu
[bhdresh]: http://twitter.com/bhdresh
[hramados]: http://twitter.com/hramados
[https_github.com_DataSploit_datasploit]: https://github.com/DataSploit/datasploit
[datasploit]: http://twitter.com/datasploit
[upgoingstar]: http://twitter.com/upgoingstar
[https_github.com_dradis_dradis-ce]: https://github.com/dradis/dradis-ce
[dradisfw]: http://twitter.com/dradisfw
[etdsoft]: http://twitter.com/etdsoft
[https_github.com_countercept_snake]: https://github.com/countercept/snake
[AlexKornitzer]: http://twitter.com/AlexKornitzer
[https_github.com_djformby_GRFICS]: https://github.com/djformby/GRFICS
[https_github.com_IBM_adversarial-robustness-toolbox]: https://github.com/IBM/adversarial-robustness-toolbox
[https_github.com_ANELKAOS_ada]: https://github.com/ANELKAOS/ada
[ANELKAOS1]: http://twitter.com/ANELKAOS1
[https_github.com_archerysec_archerysec]: https://github.com/archerysec/archerysec
[ArcherySec]: http://twitter.com/ArcherySec
[anandtiwarics]: http://twitter.com/anandtiwarics
[https_github.com_jtpereyda_boofuzz]: https://github.com/jtpereyda/boofuzz
[jtpereyda]: http://twitter.com/jtpereyda
[https_github.com_airbus-seclab_bta]: https://github.com/airbus-seclab/bta
[Sn0rkY]: https://twitter.com/_Sn0rkY
[https_github.com_13o-bbr-bbq_machine_learning_security_tree_master_DeepExploit]: https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/DeepExploit
[bbr_bbq]: http://twitter.com/bbr_bbq
[https_github.com_s4n7h0_Halcyon]: https://github.com/s4n7h0/Halcyon
[s4n7h0]: http://twitter.com/s4n7h0
[https_github.com_simplerisk]: https://github.com/simplerisk
[simpleriskfree]: http://twitter.com/simpleriskfree
[joshsokol]: http://twitter.com/joshsokol
[https_github.com_CERTCC_trommel]: https://github.com/CERTCC/trommel
[https_github.com_SpiderLabs_ModSecurity]: https://github.com/SpiderLabs/ModSecurity
[https_github.com_flipkart-incubator_Astra]: https://github.com/flipkart-incubator/Astra
[AnkurB]: http://twitter.com/_AnkurB
[popat_sagar]: http://twitter.com/popat_sagar
[https_github.com_PortSwigger_replicator]: https://github.com/PortSwigger/replicator
[paulpaj]: http://twitter.com/paulpaj
[https_github.com_owtf_owtf]: https://github.com/owtf/owtf
[owtfp]: http://twitter.com/owtfp
[viyat]: http://twitter.com/viyat
[https_github.com_rezasp_joomscan]: https://github.com/rezasp/joomscan
[OWASP_JoomScan]: http://twitter.com/OWASP_JoomScan
[rezesp]: http://twitter.com/rezesp
[vbehzadan]: http://twitter.com/vbehzadan
[https_github.com_YalcinYolalan_WSSAT]: https://github.com/YalcinYolalan/WSSAT
[yyolalan]: http://twitter.com/yyolalan