vinnyvinoth Goto Github PK

shortscan

An IIS short filename enumeration tool

sitedorks

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term with different websites. A default list is already provided.

slack-watchman

Monitoring your Slack workspaces for sensitive information

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

spoofcheck

Simple script that checks a domain for email protections

ssl-kill-switch3

Next Generation SSLKillSwitch with much more support!

sslenum

Extract SSL certificate data (Subject Name, Subject Alt Names, Organisation)

subzy

Subdomain takeover vulnerability checker

super-secret-finder

Burp Plugin for Secret Matching

surf

Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

swagger-xss-payloads

taken

Takeover AWS ips and have a working POC for Subdomain Takeover.

takeover

Sub-Domain TakeOver Vulnerability Scanner

tftptheft

TFTP Theft is a tool which allows one to quickly scan/bruteforce a tftp server for files and download them instantly

thinkphp-rce-poc-collection

thinkphp v5.x 远程代码执行漏洞-POC集合

tlsx

Fast and configurable TLS grabber focused on TLS based data collection.

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

uber-apk-signer

A cli tool that helps signing and zip aligning single or multiple Android application packages (APKs) with either debug or provided release certificates. It supports v1, v2 and v3 Android signing scheme has an embedded debug keystore and auto verifies after signing.

url-tracker

Change monitoring app that checks the content of web pages in different periods.

vajra

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.

waf-bypass-xss-payloads

XSS payloads for bypassing WAF. This repository is updating continuously.

waymore

Find way more from the Wayback Machine!

weaponised-xss-payloads

XSS payloads designed to turn alert(1) into P1

web-ctf-cheatsheet

Web CTF CheatSheet 🐈

webjars-swagger-xss

PoC for XSS in org.webjars:swagger-ui [3.14.2, 3.36.2]

weblogic

Weblogic CVE-2019-2725 CVE-2019-2729 Getshell 命令执行

webshell

dirt simple jsp webshell

weird_proxies

Reverse proxies cheatsheet

wordlists

Automated & Manual Wordlists provided by Assetnote

wordlists-1

any tool to recognize targets