HenryHoggard

CVE-2021-3156

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

JRE8u20_RCE_Gadget

JRE8u20_RCE_Gadget

whispers

Identify hardcoded secrets in static structured text

brutespray

Bruteforcing from various scanner output - Automatically attempts default creds on found services.

cs-video-courses

List of Computer Science courses with video lectures.

WeblogicScan

增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持

dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

jmet

Java Message Exploitation Tool

Findsploit

Find exploits in local and online databases instantly

nosqli

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.

NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

commix

Automated All-in-One OS Command Injection Exploitation Tool.

Photon

Incredibly fast crawler designed for OSINT.

huepy

Print awesomely in terminals.

nmap-vulners

NSE script based on Vulners.com API

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

CMSmap

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

vulscan

Advanced vulnerability scanning with Nmap NSE

Vulnerable-Kext

A WIP "Vulnerable by Design" kext for iOS/macOS to play & learn *OS kernel exploitation

BaRMIe

Java RMI enumeration and attack tool.

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

AutoRecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

katoolin

Automatically install all Kali linux tools

one_gadget

The best tool for finding one gadget RCE in libc.so.6

House-of-Corrosion

A description of the "House of Corrosion" GLIBC heap exploitation technique.

ctf-pwns

Some pwn challenges selected for training and education.