reewardius

CVE-2024-22120-RCE

Time Based SQL Injection in Zabbix Server Audit Log --> RCE

nowafpls

Burp Plugin to Bypass WAFs through the insertion of Junk Data

EasyEASM

Zero-dollar attack surface management tool

ShodanX

ShodanX is a tool to gather information of targets using shodan dorks⚡.

burpscript

xnldorker

Gather results of dorks across a number of search engines

swaks

Swaks - Swiss Army Knife for SMTP

durl

Remove duplicate URLs by retaining only the unique combinations of hostname, path, and parameter names

creepyCrawler

OSINT tool to crawl a site and extract useful recon info.

Awesome-InfoSec-TG-channels

For the most part, these are RUS tg channels and assembled manually in channels.txt. The list of subscribers is updated every 12 hours.

check_bitrix

Check bitrix vulnerabilities

gojwtcrack

Fast JSON Web Token (JWT) cracker written in Go

NTLMAnonProxy

Leaked-Credentials

how to look for Leaked Credentials !

exploit_laravel_cve-2018-15133

Exploit for Laravel Remote Code Execution with API_KEY (CVE-2018-15133)

gourlex

Gourlex is a simple tool that can be used to extract URLs and paths from web pages.

epyon

Epyon is a swiss army knife tool for pentesting DevOps ecosystems.

CVE-2024-25600-wordpress-Exploit-RCE

(Mirorring)

BlindSSTIScanner

Burp Suite extension that enhances Burp Active Scan by adding template engine specific SSTI payloads.

damplify

DNS amplification PoC

toxicache

Go scanner to find web cache poisoning vulnerabilities in a list of URLs

semgrep-rules-manager

Manager of third-party sources of Semgrep rules 🗂

semsearch

Semgrep CLI wrapper

semgrep-rules-android-security

A collection of Semgrep rules derived from the OWASP MASTG specifically for Android applications.

AzSubEnum

Azure Service Subdomain Enumeration

celerystalk

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

badPods

A collection of manifests that will create pods with elevated privileges.

acido

Azure Container Instances Distributed Operations (acido CLI) for Red Team Operations through Azure Cloud.

TInjA

TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines for eight different programming languages.

artishock

A tool to investigate Dependency Confusion in Artifactory