unashamedgeek Goto Github PK

ntlmrelayx2proxychains

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

param-miner-doc

Unofficial documentation for the great tool Param Miner

passpie

:closed_lock_with_key: Multiplatform command-line password manager

pentest_compilation

Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios

pipe-intercept

Intercept Windows Named Pipes communication using Burp or similar HTTP proxy tools

powerremotedesktop

Remote Desktop entirely coded in PowerShell.

ppscan

Client Side Prototype Pollution Scanner

protobuf-decoder

A simple Google Protobuf Decoder for Burp

pyscripter-er

A framework built on top of Burp's Python Scripter extension.

python-burp

Repository containing sample scripts for use with the Python Scripter Burp Suite extension.

rdpwrap

RDP Wrapper Library

reverse_ssh

SSH based reverse shell

secretfinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

sj

A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

socketsleuth

Burp Extension to add additional functionality for pentesting websocket based applications

sqlrecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

sslsplit

Transparent SSL/TLS interception

swagger-ez

A tool geared towards pentesting APIs using OpenAPI definitions.

tiscripts

Turbo Intruder Scripts

tmux-themepack

A pack of various Tmux themes.

turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

unfurl

Pull out bits of URLs provided on stdin

unpack-burp

For unpacking base64:ed "Save items"-content from Burp (From search + proxy history)

vajra

Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure environment. It features an intuitive web-based user interface built with the Python Flask module for a better user experience. The primary focus of this tool is to have different attacking techniques all at one place with web UI interfaces.

vapi

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios in the means of Exercises.

wfh