wayc0des-land Goto Github PK

git-dumper

A tool to dump a git repository from a website

github-search

Tools to perform basic search on GitHub.

gitlab-subdomains

Find subdomains on GitLab.

gmapsapiscanner

go-auxs

Collection of auxiliary command line tools

gobuster

Directory/File, DNS and VHost busting tool written in Go

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

grafana-vulntips

Grafana Unauthorized arbitrary file reading vulnerability

grapefruit

(WIP) Runtime Application Instruments for iOS. Previously Passionfruit

hacks

A collection of hacks and one-off scripts

hakip2host

hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.

hexhttp

Header Exploitation HTTP

httprebind

Automatic tool for DNS rebinding-based SSRF attacks

img-payloads

impulsivedllhijack

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.

insecure-firebase-exploit

A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the app have set the security rules as true for both "read" & "write" an attacker can probably dump database and write his own data to firebase db.

ios-penetration-testing-cheat-sheet

Work in progress...

jaeles

The Swiss Army knife for automated Web Application Testing

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

jfrog-cve-2022-21449

jndiexploit

A malicious LDAP server for JNDI injection attacks

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

kubernetes-goat

Kubernetes Goat is "Vulnerable by Design" Kubernetes Cluster. Designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security.

laravel-exploits

Exploit for CVE-2021-3129

leaklooker

Find open databases - Powered by Binaryedge.io

leaklooker-x

LeakLooker GUI - Discover, browse and monitor database/source code leaks

linkfinder

A python script that finds endpoints in JavaScript files

linux-privesc-tools

log4j-detect

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URLs with multithreading