mohammed-sec2010 Goto Github PK

230-oob

An Out-of-Band XXE server for retrieving file contents over FTP.

4nonimizer

A bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers (OpenVPN)

activescan3plus

Modified version of ActiveScan++ Burp Suite extension

aquatone

A Tool for Domain Flyovers

awvs_190703137

Docker Awvs

betterdefaultpasslist

blindref

BlindRef serves as the basis for an automated Blind-Based XXE Exploitation Framework

burpbounty

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

burpsuite-team-extension

This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes through your Burpsuite instance will be replicated in the history of the other testers and vice-versa!

burpsuite_pro_v1.7.32

BurpSuite_Pro_v1.7.32

bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

bypass-waff

bypass waff untuk sql injection

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cazador_unr

Simple Hacking tools

cc.py

Extracting URLs of a specific target based on the results of "commoncrawl.org"

dirsearch

Web path scanner

dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer

dotdotslash

Search for Directory Traversal Vulnerabilities

easycsrf

enum_for_all

fuxploider

File upload vulnerability scanner and exploitation tool.

hunt

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

isup

Find alive host from dumped subdomains, huge domain list , alive subdomains

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

kaboom

automatic pentest

lazyrecon

Subdomain discovery using Sublist3r, certspotter, crt.sh , censys and amass . Subdomain bruteforcing using Gobuster and Resolve hosts using tomnomnom's filter-resolved.

linksdumper

Extract (links/possible endpoints) from responses & filter them via decoding/sorting

monitorizer

The ultimate subdomain monitorization framework

monitorsubdomains

use subfinder to monitor subdomains.