mcdxn Goto Github PK

ffuf

Fast web fuzzer written in Go

finalrecon

The Last Web Recon Tool You'll Need

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

gdb-dashboard

Modular visual interface for GDB in Python

google-books-preview-pages-downloader

Download Google Books

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

hosthunter

HostHunter a recon tool for discovering hostnames using OSINT techniques.

justctf-2019

justCTF 2019 challenges sources

koadic

Koadic C3 COM Command & Control - JScript RAT

list-of-user-agents

List of major web + mobile browser user agent strings. +1 Bonus script to scrape :)

livetargetsfinder

Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts and gather service information

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

mcdxn.github.io

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

node-dns

:globe_with_meridians: A dns server and client implementation in node.js

openlibrary

One webpage for every book ever published!

osx-re-101

A collection of resources for OSX/iOS reverse engineering.

papers

Papers about known hacking, security, hardware, software, computer, network and other ressources.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peer-connect

Exploring iOS Multi Peer Connectivity framework.

phishingkittracker

Let's track phishing kits to give to research community raw material to study !

physical-docs

This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.

postmessage-logger

Simple "postMessage logger" Chrome extension

postmessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

ppsx-file-generator

CVE-2017-8570 Exploit

proxylogon-cve-2021-26855

RCE exploit for ProxyLogon vulnerability in Microsoft Exchange

proxylogon-exploit

proxylogon exploit - CVE-2021-26857

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

pwntools

CTF framework and exploit development library