lolici123 Goto Github PK

eventlistener-xss-recon

exif-samples

Sample images for testing Exif metadata retrieval.

exploits

exploits and proof-of-concept vulnerability demonstration files from the team at Hacker House

fakemeeting

Creates and sends fake meeting invite

filechangemonitor

Continuous monitoring for JavaScript files

fingerprinter

CMS/LMS/Library etc Versions Fingerprinter

firefox-security-toolkit

A tool that transforms Firefox browsers into a penetration testing suite

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

forgecert

"Golden" certificates

frida-android-examples

Examples of using frida to hook android apps

frida-dexdump

A simple script to search & dump dex file on memory.

frida-ios-app-patching

frida-scripts

Frida Scripts

frida-snippets

Hand-crafted Frida examples

frida-sslkeylog

Frida tool to dump an NSS Key Log for Wireshark, from a process using dynamically linked OpenSSL (or BoringSSL)

frida-xamarin-unpin

A Frida script to bypass Xamarin certificate pinning implementations

hacker101

Hacker101

hashcat-rule

Rule for hashcat or john. Aiming to crack how people generate their password

hostrecon

This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.

html5_attack_and_secure

HTML5 Training material for Attack and Secure training sessions.

iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

impacket

Impacket is a collection of Python classes for working with network protocols.

internal-pentest-playbook

Internal Network Penetration Test Playbook

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

is-website-vulnerable

finds publicly known security vulnerabilities in a website's frontend JavaScript libraries

java-deserialization-exploits

A collection of curated Java Deserialization Exploits

jenkins-attack-framework

jetleak-testing-script

Script to test if a server is vulnerable to the JetLeak vulnerability

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

joomlavs

A black box, Ruby powered, Joomla vulnerability scanner