helcaraxeals Goto Github PK

helcaraxeals.github.io

hellraiser

Vulnerability Scanner

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

httprebind

Automatic tool for DNS rebinding-based SSRF attacks

inql

InQL - A Burp Extension for GraphQL Security Testing

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

ipfuscator

IPFuscator - A tool to automatically generate alternative IP representations

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

java_deserialization_exploits

A collection of Java Deserialization Exploits

js-scrapper

A simple webextension designed to save all the JS files it receives

js-vuln-db

A collection of JavaScript engine CVEs with PoCs

jsonp

jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints. This could help reveal cross-site script inclusion vulnerabilities or aid in bypassing content security policies.

jsparser

just-api

:boom: Test REST, GraphQL APIs

kingofbugbountytips

lazys3

leaky-paths

A collection of special paths linked to major web CVEs, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

learning-node.js-security

A Collection of articles, videos, blogs, talks and other materials on Node.js Security

legion

Automatic Enumeration Tool based in Open Source tools

linksec

Extension which finds links in a Websites and checks for security vulnerabilities

massprint

A tool to do basic fingerprinting across a large number of hosts

megplus

Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]

meilisearch-go

Golang wrapper for the MeiliSearch API

mobile-security-framework-mobsf

Mobile Security Framework is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing framework capable of performing static analysis, dynamic analysis, malware analysis and web API testing.

modominator-chrome-extension

The chrome extension acts as an entity to detect state changes to the app, identify new DOM elements rendered and use moDOMinator to scan the DOM elements for web vulnerabilities.

myfuzzingdict

orca

Orca - Targeted OSINT Framework

oss-fuzz

OSS-Fuzz - continuous fuzzing of open source software.

otxurls

Fetch known urls from AlienVault's Open Threat Exchange for given hosts

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.