Threat Meter – Vulnorator

Github Link For Tool : https://github.com/vaibhavpareek/vulnorator.git

Threat Rator is used to explain the criticality of each vulnerability category.it means how many vulnerabilities of level critical, high, medium, low and information that exists in that particular category like server misconfiguration. It is very useful in making an approach towards bug hunting and vulnerability assessment.

[P1] CRITICAL | [P2] HIGH | [P3] MEDIUM | [P4] LOW | [P5] INFORMATIONAL

[1]  Server Security Misconfiguration                        
| P1 : 1 | P2 : 2 | P3 : 2 | P4 : 15 | P5 : 38 |   
[2]  Server-Side Injection                                   
| P1 : 4 | P2 : 0 | P3 : 2 | P4 : 2  | P5 : 6  |  
[3]  Broken Authentication and Session Management            
| P1 : 1 | P2 : 0 | P3 : 3 | P4 : 7  | P5 : 7  |    
[4]  Sensitive Data Exposure                                 
| P1 : 2 | P2 : 1 | P3 : 1 | P4 : 6  | P5 : 12 |    
[5]  Cross-Site Scripting (XSS)                              
| P1 : 0 | P2 : 1 | P3 : 3 | P4 : 6  | P5 : 6  |    
[6]  Broken Access Control (BAC)                             
| P1 : 0 | P2 : 1 | P3 : 1 | P4 : 2  | P5 : 1  |    
[7]  Cross-Site Request Forgery (CSRF)                       
| P1 : 0 | P2 : 1 | P3 : 0 | P4 : 0  | P5 : 2  |    
[8]  Application-Level Denial-of-Service (DoS)               
| P1 : 0 | P2 : 1 | P3 : 1 | P4 : 0  | P5 : 2  |    
[9]  Unvalidated Redirects and Forwards                      
| P1 : 0 | P2 : 0 | P3 : 0 | P4 : 1  | P5 : 5  |
[10] External Behavior                                       
| P1 : 0 | P2 : 0 | P3 : 0 | P4 : 0  | P5 : 9  |    
[11] Insufficient Security Configurability                   
| P1 : 0 | P2 : 0 | P3 : 0 | P4 : 4  | P5 : 7  |    
[12] Using Components with Known Vulnerabilities             
| P1 : 0 | P2 : 0 | P3 : 0 | P4 : 1  | P5 : 2  |    
[13] Insecure Data Storage                                   
| P1 : 0 | P2 : 0 | P3 : 0 | P4 : 2  | P5 : 3  |    
[14] Lack of Binary Hardening                                
| P1 : 0 | P2 : 0 | P3 : 0 | P4 : 0  | P5 : 4  |    
[15] Insecure Data Transport                                 
| P1 : 0 | P2 : 0 | P3 : 0 | P4 : 1  | P5 : 1  |    
[16] Insecure OS/Firmware                                    
| P1 : 2 | P2 : 1 | P3 : 0 | P4 : 0  | P5 : 0  |    
[17] Broken Cryptography                                     
| P1 : 1 | P2 : 0 | P3 : 0 | P4 : 0  | P5 : 0  |    
[18] Privacy Concerns                                        
| P1 : 0 | P2 : 0 | P3 : 0 | P4 : 1  | P5 : 0  |    
[19] Network Security Misconfiguration                       
| P1 : 0 | P2 : 0 | P3 : 0 | P4 : 0  | P5 : 1  |
[20] Mobile Security Misconfiguration                        
| P1 : 0 | P2 : 0 | P3 : 0 | P4 : 1  | P5 : 4  |    
[21] Client-Side Injection                                   
| P1 : 0 | P2 : 0 | P3 : 1 | P4 : 0  | P5 : 2  |    
[22] Automotive Security Misconfiguration                    
| P1 : 2 | P2 : 2 | P3 : 3 | P4 : 6  | P5 : 3  |

Github Link for Vulnorator :

REFRENCE :: https://bugcrowd.com/vulnerability-rating-taxonomy

Thanks for reading about Vulnorator’s Threat Rator mode ,if you want the full list then please download the tool from the Github link and could use it find valuable and some good bugs.

Vaibhav Pareek (Developer – Vulnorator)

Published by Vulnorator

Vaibhav is a hard-working individual with a smart thought process. He loves to work on web-based projects maybe it is the development of the website, development of penetration testing report. People can approach him for individual or group projects, also with projects he loves to give tech talks. He would be very happy if you could reach him for technical seminars or talks .it will be completely free of cost. Always ready to enhance awareness about the importance of cybersecurity through various platforms. His passion is to learn new and cool stuff. The best quality of his can be the way he presented his work. Most important he is a learner who is always open to new stuff and to gain knowledge. Always feel free to give suggestions to improve this website.

Leave a comment

Your email address will not be published. Required fields are marked *

www.000webhost.com