qu33n1x Goto Github PK

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cloud_crack

Crack passwords using Terraform and AWS

cve-2022-0543

CVE-2022-0543_RCE,Redis Lua

cve-2022-21907

A REAL DoS exploit for CVE-2022-21907

elastiflow

Network flow analytics (Netflow, sFlow and IPFIX) with the Elastic Stack

free-security-ebooks

Free Security and Hacking eBooks

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

hacking-books

jenkins-cve-2016-0792

Exploit for Jenkins serialization vulnerability - CVE-2016-0792

kali-setup-script

Bash script which prepares Kali for a pentest by enabling session logging, installing tools, and making common configuration changes

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

log4shell-detector

Detector for Log4Shell exploitation attempts

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

nuclei

Nạk Lèy

oh365userfinder

Python3 o365 User Enumeration Tool

pieviltwin

Raspberry Pi WiFi Evil Twin Captive Portal

piwifipineapple

poc_pentest

pocorexp_in_github

聚合Github上已有的Poc或者Exp，CVE信息来自CVE官网。Auto Collect Poc Or Exp from Github by CVE ID.

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

securty-books

smtp-password-checker

Gmail

sql-injection

SQL Injection / SQL инъекциа - Hacking and bypass

trevorproxy

A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses!

wafpass

Analysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF.

weevely3

Weaponized web shell

weirdhta

A tool to create obfuscated HTA script.