chouaib H'm's repositories
4-ZERO-3
403/401 Bypass Methods + Bash Automation + Your Support ;)
awesome-obsidian
🕶️ Awesome stuff for Obsidian
BugBountyTemplates
List of reporting templates I have used since I started doing BBH.
cve
Gather and update all available and newest CVEs with their PoC.
CVE-2022-0778
Proof of concept for CVE-2022-0778, which triggers an infinite loop in parsing X.509 certificates due to a bug in BN_mod_sqrt
domscan
Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.
flipperbit
Corrupted files generator. Random bits flipper.
GPT_Vuln-analyzer
Uses ChatGPT API and Python-Nmap module to use the GPT3 model to create vulnerability reports based on Nmap scan data.
hacktricks
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
HackVault
A container repository for my public web hacks!
host_scan
这是一个用于IP和域名碰撞匹配访问的小工具,旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。https://github.com/fofapro/Hosts_scan implement in Go
Log4j2Scan
Log4j2 RCE Passive Scanner plugin for BurpSuite
Pentesting_cheatsheet
Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.
PentestNote
个人输出,经验/思路/想法/总结/. . .
pretender
Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.
Reconky-Automated_Bash_Script
Reconky is an great Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which help them to look forward.
RFSec-ToolKit
RFSec-ToolKit is a collection of Radio Frequency Communication Protocol Hacktools.无线通信协议相关的工具集,可借助SDR硬件+相关工具对无线通信进行研究。Collect with ♥ by HackSmith
sexfinder
archiveed secret finder burp plugin
ShuiZe_0x727
信息收集自动化工具
SpringBootExploit
项目是根据LandGrey/SpringBootVulExploit清单编写,目的hvv期间快速利用漏洞、降低漏洞利用门槛。
uncover
Quickly discover exposed hosts on the internet using multiple search engine.
vulns-2022
本项目用于搜集 2022 年的漏洞,注意:本项目并不刻意搜集 POC 或 EXP,主要以CVE-2021、CVE-2022 为关键词,包含但不限于漏洞资讯、漏洞复现、漏洞分析、漏洞验证、漏洞利用
Web-Attack-Cheat-Sheet
Web Attack Cheat Sheet
weggli
weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.