natrix-fork Goto Github PK

contexploit

Contec Smart Home unauthorized user added

corscanner

Fast CORS misconfiguration vulnerabilities scanner🍻

cr3dov3r

Know the dangers of credential reuse attacks.

crawlic

Web recon tool (find temporary files, parse robots.txt, search some folders, google dorks and search domains hosted on same server)

crimecheck

The CRIME and BREACH Attacks work against SSL and HTTP Compression. They leverage specific properties of used compression functions and can reveal to an attacker sensitive information being passed inside an encrypted SSL tunnel such as authentication cookies. This is a python based tool to check if the Web Server is vulnerable to compression based attacks

crlf-injection-scanner

Command line tool for testing CRLF injection on list of domains.

crossdomainscanner

Python tool for expired domain discovery in crossdomain.xml files

csv2html

Convert CSV files to HTML tables with this flexible utility/Python module

ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

curate

A tool for fetching archived URLs (to be rewritten in Go).

cve-2017-1000486

Primefaces <= 5.2.21, 5.3.8 or 6.0 - Remote Code Execution Exploit

cve-2017-10271

WebLogic Exploit

cve-2017-12617

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution

cve-2017-7269-tool

CVE-2017-7269 to webshell or shellcode loader

cve-2018-0296

Test CVE-2018-0296 and extract usernames

cve-2018-10933_scanner

cve-2018-11776-python-poc

Working Python test and PoC for CVE-2018-11776, includes Docker lab

cve-2018-7600

Testing and exploitation tool for Drupalgeddon 2 (CVE-2018-7600)

cve-2018-9206

A Python PoC for CVE-2018-9206

cve-2019-11043

php-fpm+Nginx RCE

cve-2019-5418-scanner

A multi-threaded Golang scanner to identify Ruby endpoints vulnerable to CVE-2019-5418

cybercrowl

CyberCrowl is a python Web path scanner tool

cybercrowl-1

CyberCrowl is a python Web path scanner tool

cybscan

- Scannner for wordpress websites -

d-tect-1

D-TECT - Pentesting the Modern Web

damnwebscannerplugin

darksplitz

Exploit Framework

datasploit

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

datasploitaudit

davscan

Fingerprints servers, finds exploits, scans WebDAV. May or may not also make coffee.