warlock0007 Goto Github PK

activescanplusplus

ActiveScan++ Burp Suite Plugin

afe

Android Framework for Exploitation, is a framework for exploiting android based devices

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

androbugs_framework

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.

aquatone

A Tool for Domain Flyovers

assetnote-poc

(Proof of concept) push notifications for passive DNS data

awesome-vehicle-security

🚗 A curated list of resources for learning about vehicle security and car hacking

bb-reports-templates

My small collection of reports templates

bb-tips-tricks

Just Some Tips & Tricks for BB found on the Internet :D

bucketsnoop

A Firefox extension and WebSocket handler that checks S3/Google/Azure buckets while your browse.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

burp-lfi-tests

Fuzzing for LFI using Burpsuite

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

contact.sh

An OSINT tool to find contacts in order to report security vulnerabilities.

content-bruteforcing-wordlist

Wordlist for content(directory) bruteforce discovering with Burp or dirsearch

crlf-injection-payloads

Payloads for CRLF Injection

crosssitecontenthijacking

Content hijacking proof-of-concept using Flash, PDF and Silverlight

csrf-request-builder

dirsearch

Web path scanner

dirsearch-wordlist

Serbian/English wordlist for https://github.com/maurosoria/dirsearch

ds_store_exp

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

enumapis

Traverse JS files for APIs/Endpoints

enumxff

Enumerating IPs in X-Forwarded-Headers to bypass 403 restrictions

filterbypass

frida-scripts

A collection of my Frida.re instrumentation scripts to facilitate reverse engineering of mobile apps.

fuzzdb

Automatically exported from code.google.com/p/fuzzdb

gifoeb

exploit for ImageMagick's uninitialized memory disclosure in gif coder

gitrob

Reconnaissance tool for GitHub organizations

gobuster

Directory/file & DNS busting tool written in Go

ground-control

A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.