defensahacker Goto Github PK

bob-inject

Webapp path discovery and fuzzer

cve-2006-3747

Information about my advisory on CVE-2006-3747 (Apache mod_rewrite LDAP off-by-one buffer overflow).. At the time, it was the first public working exploit :)

cve-2016-5195

CVE-2016-5195 (dirtycow/dirtyc0w) proof of concept for Android

cvss2-calculator

CVSSv2.js is a Free and Open Source Javascript library that is based on Common Vulnerability Scoring System (CVSS) version 2.0 calculator easier to share and deploy.

debian-weak-ssh

fosc

TCP/UDP Fast Port Scanner

kernel2.4-rootkit

Hijacking system calls on 2.4 linux kernels

ldd-win

A similar Linux ldd command for EXE files... for DLL hijacking prevention or exploitation

nessus-plugins

Extended plugins for Tenable Nessus scanner

nodessrf

Lab to understand and test SSRF attacks

nodexss

Simple and vulnerable NodeJS app prone to Cross-Site Scripting (XSS)

owasp-risk-assessment-calculator

This Risk Rating Calculator is based on OWASP's Risk Rating Methodology

panther-analysis

Built-in Panther detection rules and policies

pnfaker

Process name faker for linux/BSD/Unix

polygon-transferwithsig

python-evtx

Pure Python parser for recent Windows Event Log files (.evtx)

secrets-finder

Simple script to find secrets inside source code folders

shellcodes

My shellcodes library

spinfuzz

Fuzzing lists for webapp pentesting

syn-file

Exfiltrate data from a compromised target using covert channels

term-colors

Color codes for Linux terminal (Python and Bash)

urlsucker

Sucks all embedded URLs from a given URI or file. Ideal to parse URLs from CSS or JavaScript (such as API calls, webservices, ;)

viewstate-decoder

Small tool to decode ASP.NET __VIEWSTATE variable when doing webpentests

windows-evtx-forensics

Perform forensics in Windows Event Log Files