0xfatty Goto Github PK

paramspider

Mining parameters from dark corners of Web Archives

pass2ntlm

A python script for converting a password into an LM:NTLM string

passivedns

A network sniffer that logs all DNS server replies for use in a passive DNS setup

pavelow

PAVELOW Exploit Toolbox is a BASH script that corresponds with your KALI distro to better help your vulnerability hunting and exploiting proccess with a few other goodies added to aid your fight.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peda

PEDA - Python Exploit Development Assistance for GDB

pentest-tools

Custom pentesting tools

pentest_compilation

Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios

pentest_old

pentest tools

personal-security-checklist

🔒 A curated checklist of 100+ tips for protecting digital security and privacy in 2020

photon

Incredibly fast crawler designed for OSINT.

play-webgoat

A vulnerable Play application for attackers.

poc

presentations

privilege-escalation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

pup

Parsing HTML at the command line

pwnedornot

OSINT Tool to Find Passwords for Compromised Email Addresses

python-remotezip

Python module to access single members of a zip archive without downloading the full content from a remote web server.

ql

The libraries and queries that power CodeQL and LGTM.com

rails-doubletap-rce

RCE on Rails 5.2.2 using a path traversal (CVE-2019-5418) and a deserialization of Ruby objects (CVE-2019-5420)

randomscripts

Random Shell Scripts and other ideas I have along the way

rau_crypto

Hard-coded encryption key remote file upload exploit for CVE-2017-11317, CVE-2017-11357 (Telerik UI for ASP.NET AJAX)

rcescanner

Simple python script to extract unsafe functions from php projects

red_team_tool_countermeasures

redteam

Red Team Scripts by d0nkeys (ex SnadoTeam)

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

retoolkit

Reverse Engineer's Toolkit

robber

Robber is open source tool for finding executables prone to DLL hijacking

s3-buckets-finder

Find aws s3 buckets and extract datas.

s3recon

Amazon S3 bucket finder and crawler.