MU2324

sf2-profiler-exploit

Symfony2 < 2.5.4 profiler exploit

Jeeves

Jeeves SQLI Finder

airixss

Finding XSS during recon

Dorks-collections-list

List of Github repositories and articles with list of dorks for different search engines

WebShell

Webshell && Backdoor Collection

github-dorks

Useful Github Dorks for BugBounty -

Awesome-Dorks

Dorks for Bug Bounty Hunting

wapiti-3.0.0

Wapiti 3.0.0 - The Web-Application Vulnerability Scanner

doser.go

DoS tool for HTTP requests (inspired by hulk but has more functionalities)

Bug-Bounty-Wordlists

A repository that includes all the important wordlists used while bug hunting.

rbndr

Simple DNS Rebinding Service

icons-in-terminal

Use any fonts in the terminal without replacing or patching

powerline-shell

A beautiful and useful prompt for your shell

synth-shell

Boost your terminal, script by script

better-ls

A better version of ls

ffufplus

You can read the writeup on this script here

Mobile-PT

|| Android Application Security ||

hostinject

hostinject (Host Header Injection) Tool is a Python script that allows you to perform host header injection vulnerability testing on a target URL or a list of URLs. It injects various header values and checks for potential vulnerabilities.

cacheblaster

A python tool to test for web cache poisoning denial of service (CPDoS) vulnerabilities.

Web-Cache-Vulnerability-Scanner

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

toxicache

Go scanner to find web cache poisoning vulnerabilities in a list of URLs

autopoisoner

Web cache poisoning vulnerability scanner.

hostinject

hostinject (Host Header Injection) Tool is a Python script that allows you to perform host header injection vulnerability testing on a target URL or a list of URLs. It injects various header values and checks for potential vulnerabilities.

eWPTX-Preparation

BlueToolkit

BlueToolkit is an extensible Bluetooth Classic vulnerability testing framework that helps uncover new and old vulnerabilities in Bluetooth-enabled devices. Could be used in the vulnerability research, penetration testing and bluetooth hacking. We also collected and classified Bluetooth vulnerabilities in an "Awesome Bluetooth Security" way

CVE-2024-32640-SQLI-MuraCMS

CVE-2024-32640 | Automated SQLi Exploitation PoC

dork-generator

Google dork generator

dorkGen

Quickly create a list of dorks based on variables entered.

jfscan

JF⚡can - Super fast port scanning & service discovery using Masscan and Nmap. Scan large networks with Masscan and use Nmap's scripting abilities to discover information about services. Generate report.

DNSenum

Bash script for DNS Enumeration.