semimitoz Goto Github PK

reflector

A crawler that tests HTML forms for reflection

rfcpwn

An enumeration and exploitation toolkit using RFC calls to SAP

s3cxsser

This extension will help you to detect GET/POST based XSS vulnerability in any website easily

sandcastle

🏰 A Python script for AWS S3 bucket enumeration.

sap_exploit

Here you can get full exploit for SAP NetWeaver AS JAVA

sap_gw_rce_exploit

SAP Gateway RCE exploits

sap_recon

PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)

scrapts

Scrapts Scrapts Scrapts

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shortscan

An IIS short filename enumeration tool

snallygaster

Tool to scan for secret files on HTTP servers

sns

IIS shortname scanner written in Go

solr-injection

Apache Solr Injection Research

solr_rce

Apache Solr RCE via Velocity template

springboot_actuator_rce

SpringBoot_Actuator_RCE

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

struts2-048

CVE-2017-9791

subfinder

SubFinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

sublist3r

Fast subdomains enumeration tool for penetration testers

testssl.sh

Testing TLS/SSL encryption anywhere on any port

tools

urldedupe

Pass in a list of URLs with query strings, get back a unique list of URLs and query string combinations

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

weaponised-xss-payloads

XSS payloads designed to turn alert(1) into P1

web-security-learning

Web-Security-Learning

xsscrapy

XSS spider - 66/66 wavsep XSS detected

xssfinder

Toolset for detecting reflected xss in websites