1lastbr3ath Goto Github PK

android_security

This repository is a suplimentary material for Android Training's done by Anant Shrivastava

autorepeater

Automated HTTP Request Repeating With Burp Suite

autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

burpjslinkfinder

Burp Extension for a passive scanning JS files for endpoint links.

chankro

Herramienta para evadir disable_functions y open_basedir

collabfiltrator

Exfiltrate blind remote code execution output over DNS via Burp Collaborator.

collaborator-everywhere

A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator

cookiemonster

🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.

csp-server

CSP (Content Security Policy) reports server which forwards reports to Elasticsearch.

detectdynamicjs

The DetectDynamicJS Burp Extension provides an additional passive scanner that tries to find differing content in JavaScript files and aid in finding user/session data.

drmine

Dr. Mine is a node script written to aid automatic detection of in-browser cryptojacking.

easyctf-2015-writeup

Writeup from EasyCTF 2015

facebook-followers

Facebook - list out people, the user is currently following

gitscraper

A tool which scrapes public github repositories for common naming conventions in variables, folders and files

ipobfuscator

A simple too to convert the IP to a DWORD IP

jsparser

my-shodan-scripts

Collection of Scripts for shodan searching stuff.

oss2018

Open Security Summit 2018

pentest-tools

Custom pentesting tools

phpbash

A semi-interactive PHP shell compressed into a single file.

s3scanner

A simple bash script to automate scanning S3 Buckets

secretz

secretz, minimizing the large attack surface of Travis CI

shadowbroker

smbghost

Scanner for CVE-2020-0796 - SMBv3 RCE

spectreexploit

SpectreExploit POC

sshlooter

Script to steal passwords from ssh.

tasks

This page contains a checklist of the tasks you typically need to perform when carrying out a comprehensive attack against a web application. The page has been modified to store user-interaction in browser's localStorage making it easier to track tests that are pending and/or are already covered.

thc-archive

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

virtual-host-discovery

A script to enumerate virtual hosts on a server.

webshell

This is a webshell open source project