sergiovks

Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Blacklist3r

project-blacklist3r

BChecks-Collection

BChecks collection for Burp Suite Professional

BChecks

BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition

graudit

grep rough audit - source code auditing tool

m4ngl3m3

Common password pattern generator using strings list

chronos

Extract pieces of info from a web page's Wayback Machine history

OneForAll

OneForAll是一款功能强大的子域收集工具

subzy

Subdomain takeover vulnerability checker

bugbounty

Bugbounty Resources

burp-auto-gql

A plugin for Burp Suite Pro that uses the GraphQL schema to begin Active Scanning the entire endpoint.

Atlas

Quick SQLMap Tamper Suggester

MANSPIDER

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

NetExec

The Network Execution Tool

CVE-2023-25690-POC

CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.

DNStakeover

DNS Takeover Checker

bigip-scanner

Determine the running software version of a remote F5 BIG-IP management interface.

nginxpwner

Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.

jpeg_polyglot_xss

Exploiting XSS with Javascript/JPEG Polyglot (by @medusa_0xf)

CVE-2023-46747-RCE

exploit for f5-big-ip RCE cve-2023-46747

webshells

This repo contains one liner web shells

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ

Achieving a Reverse Shell Exploit for Apache ActiveMQ (CVE_2023-46604)

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

Web3-Security-Library

Information about web3 security and programming tutorials/tools

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

Anubis-8.0

Anubis 8.0 Android RAT

D4TA-HUNTER

GUI Osint Framework with Kali Linux

GodPotato

rpcenum

Herramienta en Bash ideal para extraer la información más relevante de un dominio vía rpcclient.