xmrseo Goto Github PK

230-oob

An Out-of-Band XXE server for retrieving file contents over FTP.

31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

amass

In-depth DNS Enumeration and Network Mapping

android-crack-tool

🐞Android crack tool For Mac

angularjs-csti-scanner

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.

antsword

AntSword is a cross-platform website management toolkit.

apache-struts-v3

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

arjun

HTTP parameter discovery suite.

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesome-nodejs-security

Awesome Node.js Security resources

b-xssrf

behinder

“冰蝎”动态二进制加密网站管理客户端

bottle

bottle.py is a fast and simple micro-framework for python web-applications.

bug-bounty-resources

Resources I consider useful for security research of web applications

bugcrowd_university

Open source education content for the researcher community

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

commix

Automated All-in-One OS command injection and exploitation tool.

cve-2021-44228-apache-log4j-rce

Apache Log4j 远程代码执行

diggy

Extract endpoints from apk files.

dirsearch

Web path scanner

distributed-jwt-cracker

An experimental distributed JWT token cracker built using Node.js and ZeroMQ

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

enumjavalibs

Remote Java classpath enumeration via deserialization

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

exif-samples

Sample images for testing Exif metadata retrieval.

exploitdb

The official Exploit Database repository

ffuf

Fast web fuzzer written in Go

freddy

Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans