febinrev

BinExp

Linux Binary Exploitation

PowerSharpPack

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

httptoolkit

HTTP Toolkit is a beautiful & open-source tool for debugging, testing and building with HTTP(S) on Windows, Linux & Mac :tada: Open an issue here to give feedback or ask for help.

Phalanger

PHP 5.4 compiler for .NET/Mono frameworks. Predecessor to the opensource PeachPie project (www.peachpie.io).

FirejailProfileGenerator

POC by Febin

firejail

Linux namespaces and seccomp-bpf sandbox

fdns

Firejail DNS-over-HTTPS Proxy Server

knob

Key Negotiation Of Bluetooth (KNOB) attacks on Bluetooth BR/EDR and BLE [CVE-2019-9506]

Amsi-Bypass-Powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

clipjack

ClipJack is a Social Engineering tool through which a user can be tricked to copy something legit but his clipboard data will get replaced with attacker controlled data.

JavaApplet

These are from Offensive Security. This is for study Client-Side Attack with JavaApplet. A good example of a client side exploit based on a human vulnerability, as opposed to a software vulnerability, is the JavaApplet client side attack. This attack affects targets with Java installed and enabled in their browsers – a required feature for many administrators and power users. As JavaLenabled browsers can run Java applications, it is quite trivial to make our own malicious Java applet which will execute code of our choosing when run. However, there is one drawback: the user will get a warning box before execution of our Java payload. The average user may not understand the implications of clicking Run on this warning box. If the user runs the program, the Java software installed on the victim’s machine will execute our payload happily.!! The Java code below will download a given executable and execute it in a temporary directory on the target machine. But, you need to edit IP address in the program

quester

QUESTER is a Web Pentesting & Bug Bounty Recon tool which queries URLs / Subdomains from the given list of URLs or subdomains.

NtHiM

Now, the Host is Mine! - Super Fast Sub-domain Takeover Detection!

SubOver

A Powerful Subdomain Takeover Tool

firejail-profiles

Tight Firejail profiles

ssti-payloads

🎯 Server Side Template Injection Payloads

TJ-JPT

This repo contains my pentesting template that I have used in PWK and for current assessments. The template has been formatted to be used in Joplin

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

CVE-2020-5902

exploit code for F5-Big-IP (CVE-2020-5902)

pen_300_osep_prep

Preparation guide for Offensive Security's PEN-300 course and OSEP certification exam

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

S3Scanner

Scan for misconfigured S3 buckets across S3-compatible APIs!

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

JSFScan.sh

Automation for javascript recon in bug bounty.

GitDorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

TechNet-Gallery

Copies of my 'Script Center' and 'Technet Gallery' publications

PS2EXE

Module to compile powershell scripts to executables

hackazon

A modern vulnerable web app