Teicu

LinkScope_Client

Repository for the LinkScope Client software.

CVE-2024-34102

CosmicSting (CVE-2024-34102)

My-Shodan-Scripts

Collection of Scripts for shodan searching stuff.

hassh-utils

hassh-utils: Nmap NSE Script and Docker image for HASSH - the SSH client/server fingerprinting method (https://github.com/salesforce/hassh)

CSPTBurpExtension

CSPT is an open-source Burp Suite extension to find and exploit Client-Side Path Traversal.

Nucleimonst3r

Nucleimonst3r is a powerful vulnerability scanner that can help Bug Bounty Hunters find low hanging fruit vulnerabilities for known CVEs and exploits but also gather all the technology running behind them for further investigation for a potential target.

CVE-2024-6387_Check

CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH

uff

unleashed ffuf

pdFExploits

this repo contains all types of pdf exploits..

XSS-Bypass-Filters

pdf-injection

Tool to create XSS PDF files

my-payloads

BrowserBruter

BrowserBruter is a powerful web form fuzzing automation tool designed for web security professionals and penetration testers. This Python-based tool leverages Selenium and Selenium-Wire to automate web form fuzzing, making it easier to identify potential vulnerabilities in web applications.

CVE-2024-4577

PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC

X-Recon

A utility for detecting webpage inputs and conducting XSS scans.

CVE-2024-4358

Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)

Yamilicious

Custom nuclei templates for bug hunting.....

BugBounty-2.0

Modern real world bug bounty payloads and exploitation techniques with may earn you some $$$.

BBScan

A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers

secfiles

My useful files for penetration tests, security assessments, bug bounty and other security related stuff

xmap

XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning.

citrixInspector

Accurately fingerprint and detect vulnerable (and patched!) versions of Netscaler / Citrix ADC to CVE-2023-3519

sasori

Sasori is a dynamic web crawler powered by Puppeteer, designed for lightning-fast endpoint discovery.

Apache-OFBiz-Directory-Traversal-exploit

http-request-smuggling

HTTP Request Smuggling Detection Tool

misconfig-mapper

Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!

SharpBruteForceSSH

AutoAppDomainHijack

Automated .NET AppDomain hijack payload generation

dauthi

dauthi is a tool that takes advantage of API functionality across a variety of MDM solutions to perform user enumeration and single-factor authentication attacks. Additionally, the framework offers authentication attacks and enumeration functionality for O365 and MFA portals.

jwt-scanner

JWT-scanner Burp Extension