tequreq Goto Github PK

arjun

HTTP parameter discovery suite.

benchmarkjava

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

besticon

Favicon service written in Go

blog

Blog content of blog.dornea.nu

cero

Scrape domain names from SSL certificates of arbitrary hosts

chromedp

A faster, simpler way to drive browsers supporting the Chrome DevTools Protocol.

codeql-javascript-unsafe-jquery-plugin

craft-sherlock

Security scanner and monitor to keep your site and Craft CMS secure.

cve-2014-0130

cve-2014-0130 rails directory traversal vuln

cve-2020-2551

Weblogic IIOP CVE-2020-2551

cve-2020-7247-exploit

Python exploit of cve-2020-7247

cve-2021-44228-apache-log4j-rce

Apache Log4j 远程代码执行

cvelist

Pilot program for CVE submission through GitHub

dastardly-github-action

Runs a scan using Dastardly by Burp Suite against a target site and creates a JUnit XML report for the scan on completion.

depix

Recovers passwords from pixelized screenshots

django.nv

Vulnerable Django Application

eleventy-base-blog

A starter repository for a blog web site using the Eleventy static site generator.

fuzzing

《深入理解Fuzzing技术》

fuzzing-dicts

Web Security Dictionary

go-http-monitor

A (dead-simple) Golang utility allowing you to monitor HTTP endpoints

hackeronereports

Here you can find mostly all disclosed h1 reports

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

iframely

oEmbed proxy. Supports over 1800 domains via custom parsers, oEmbed, Twitter Cards and Open Graph

infosec_reference

An Information Security Reference That Doesn't Suck

lifelong-learner

An app with Trie tree and Breve search Implementation CLI and HTTP both 🥳

mdisec-twitch-yayinlari

https://twitch.tv/mdisec

metasploit-framework

Metasploit Framework

monsoon

Fast HTTP enumerator

ms-teams-rce

pd-actions

Continuous recon and vulnerability assessment using Github Actions.