Sign in Book a Demo

Yasuo

Threat Defense Vulnerability Management

Pricing: Free

Visit Website ↗

Yasuo

What is Yasuo

A GitHub App that monitors GitHub organizations or repositories for adherence to security best practices and detects policy violations.

Yasuo: A Ruby Script for Scanning Vulnerable Web Applications

Yasuo is a Ruby script designed to scan for vulnerable third-party web applications. During a network security assessment—whether internal, external, or red teaming—we frequently encounter vulnerable third-party web applications or web front-ends. These vulnerabilities can allow us to compromise the remote server by exploiting publicly known weaknesses. Some commonly targeted applications include the Apache Tomcat administrative interface, JBoss jmx-console, Hudson Jenkins, and others. A search on Exploit-db reveals over 10,000 remotely exploitable vulnerabilities present in numerous web applications and front-ends. These vulnerabilities could enable an attacker to fully compromise the back-end server.

Exploring Vulnerabilities: RCE, SQL Injection, and More

These vulnerabilities include Remote Code Execution (RCE), malicious file uploads, SQL injection, and Remote File Inclusion/Local File Inclusion (RFI/LFI), among others. Yasuo is designed to swiftly scan the network for these vulnerable applications, effectively presenting pwnable targets on a silver platter.

Yasuo Reviews

No reviews yet.

Similar Tools

Free
Vulnerability Management

Vulcan Cyber

Vulcan Cyber, now part of Tenable, revolutionizes enterprise cyber risk reduction by automating and orchestrating the entire vulnerability remediation lifecycle from detection to resolution. It empowers organizations to adopt agile security practices through dynamic, scalable processes, adaptive planning, and continuous remediation, enabling rapid and flexible responses to exposures and risks.

End-to-end vulnerability remediation automationDynamic and scalable orchestrationAdaptive planning for risk management
Free
Vulnerability Management

Seemplicity

Seemplicity empowers security teams to streamline and scale risk reduction efforts through an integrated platform. By automating, optimizing, and centralizing security workflows, Seemplicity enables intelligent communication between tools, teams, and assets. This ultimately leads to a more efficient, collaborative, and agile security posture, regardless of an organization's current program maturity.

Automated risk reduction workflowsCentralized security operations workspaceIntelligent tool, team, and asset communication
Free
Vulnerability Management

Opus

Opus empowers organizations to proactively manage and mitigate cloud security risks through a unified platform for defining, orchestrating, and automating remediation processes. By integrating seamlessly with existing cloud and security tools, Opus offers comprehensive visibility and centralized management of security findings across distributed environments. It equips SecOps teams with pre-built playbooks and best practices to automate the resolution of complex security issues, continuously measuring and improving remediation effectiveness for enhanced security posture.

Unified cloud security risk management platformAutomated remediation process orchestrationSeamless integration with existing security tools
Free
Vulnerability Management

DefectDojo

DefectDojo is a comprehensive DevSecOps and vulnerability management platform designed to streamline your application security program. It empowers teams to centralize security findings, manage product and application data, and efficiently triage vulnerabilities. With over 150 security tool integrations and seamless bi-directional JIRA synchronization, DefectDojo provides a single source of truth for all your security intelligence, enabling faster remediation and improved security posture.

Comprehensive Vulnerability ManagementDevSecOps AutomationExtensive Security Tool Integrations (150+)
Free
Vulnerability Management

Censys

Censys provides comprehensive, near real-time global visibility into your attack surface, empowering security and IT teams to proactively identify and mitigate risks. Leveraging trusted security data and researcher expertise, Censys Enterprise delivers actionable insights to defend your infrastructure against nation-state attacks, emerging threats, and common vulnerabilities, akin to having an expert security research team dedicated to your assets.

Comprehensive attack surface visibilityNear real-time threat intelligenceProactive risk identification and mitigation

Do not let AI keep
recommending someone else

Start your 7-day free trial and get your AI Visibility Score in about a minute. See exactly where you stand, where competitors are beating you, and the ranked fixes to get into the answer. Cancel anytime before the trial ends.

Start Your 7-Day Free Trial Book a Live Demo

7-day free trial. Cancel anytime before it ends. Trusted by 500+ B2B SaaS teams.

Partnered with
Powered by