sherlocksecurity Goto Github PK

a-full-list-of-wordlists

this contain the burp pack

acunetix

acunetix 13 crack by mtd

arjun

HTTP parameter discovery suite.

attacking-and-auditing-docker-containers-and-kubernetes-clusters

Appsecco training course content on Attacking and Auditing Dockers Containers and Kubernetes Clusters

aws-report

AWS Report is a tool for analyzing amazon resources.

bluekeep-poc

BlueKeep is a use-after-free vulnerability, meaning that the program tries to use memory after it is supposed to have discarded it. The vulnerability lies in termdd.sys, which is the RDP kernel driver. A user can exploit this by opening an RDP connection to a remote computer called a channel – in this case a default RDP channel called MS_T210 – and sending specially crafted data to it. The exploit runs code on Windows XP, they said, but warned that it would probably crash Windows 7 or Server 2008 machines. By sending a specially crafted packet an attacker is able to set the value for the Channel ID to something the RDP service isn’t expecting, this causes a memory corruption bug that will create the conditions for Remote Code Execution to occur. Should the attacker choose to follow up with packets designed to take advantage of this flaw remote code execution can be achieved with System user privileges. There are no payloads. This is just a PoC. HOWEVER it is easily ported to an exploit since you can easily add payloads to this.

bountycalculator

breaking-and-pwning-apps-and-servers-aws-azure-training

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

broken-link-checker

Find broken links, missing images, etc within your HTML.

certsio

command-injection-payload-list

🎯 Command Injection Payload List

cve-2018-13379

CVE-2018-13379

cve-2019-0604

cve-2019-0604 SharePoint RCE exploit

cve-2019-11510

Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)

cve-2019-6715

cve-2020-1206-poc

CVE-2020-1206 Uninitialized Kernel Memory Read POC

cve-2022-1388-exploit-poc

PoC for CVE-2022-1388_F5_BIG-IP

cve-2023-4762-code-review

dirsearch

Web path scanner

enumerate-iam

Enumerate the permissions associated with AWS credential set

exploits

ffuf

Fast web fuzzer written in Go

fuzzapi

Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gitgraber

gitGraber is a tool developed in Python3 to monitor GitHub to search and find sensitive data for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

gmapsapiscanner

hackbar

HackBar plugin for Burpsuite v1.0

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application