asadanwar90 Goto Github PK

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

ground-control

A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

h4cker

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

hacker101

Hacker101

hacks

A collection of hacks and one-off scripts

hacks-1

Repo of useful scripts

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

holytips

Tips and Tutorials on Bug Bounty Hunting and Web Application Security.

how-to-exit-vim

Below are some simple methods for exiting vim.

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

http2smugl

injuredandroid

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

ipfuscator

IPFuscator - A tool to automatically generate alternative IP representations

jaeles

The Swiss Army knife for automated Web Application Testing

jaeles-signatures

Default signature for Jaeles Scanner

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

leaky-paths

A collection of special paths linked to major web CVEs, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

leaky-repo

Benchmarking repo for secrets scanning

learn-at-home

lfi-files

Wordlist to bruteforce for LFI

linwinpwn

linWinPwn is a bash script that automates a number of Active Directory Enumeration and Vulnerability checks

livetargetsfinder

Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts and gather service information

markdown-xss-payloads

XSS payloads for exploiting Markdown syntax

matchandreplace

Match and Replace script used to automatically generate JSON option file to BurpSuite

memcrashed-ddos-exploit

DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API

mind-maps

Mind-Maps of Several Things