semimitoz Goto Github PK

imperva_gzip_waf_bypass

jiraffe

One stop place for exploiting Jira instances in your proximity

jsparser

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

keywords

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

lazys3

linkfinder

A python script that finds endpoints in JavaScript files

lowlevelprogramming-university

How to be low-level programmer

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

megplus

Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]

middleware-vulnerability-detection

CMS、中间件漏洞检测利用合集 Since 2019-9-15

my-shodan-scripts

Collection of Scripts for shodan searching stuff.

mysapadventures

A quick methodology on testing / hacking SAP Applications for n00bz and bug bounty hunters

onelistforall

Rockyou for web fuzzing

open-redirect

Open Redirect Finder.

ote

Generate Email, Register for anything, Get the OTP/Link

oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

pacemaker

Heartbleed (CVE-2014-0160) client exploit

parameth

This tool can be used to brute discover GET and POST parameters

payloads

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peepdf

Powerful Python tool to analyze PDF documents

phuip-fpizdam

Exploit for CVE-2019-11043

privilege-escalation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

python-axfr-test

A tiny tool to check misconfigured dns servers

radare2-workshop-2015

recollapse

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

recon-my-way

This repository created for personal use and added tools from my latest blog post.