303sec Goto Github PK

303sec.github.io

Public Blog

add-custom-header

A Burp Suite extension to add a custom header (e.g. JWT)

blind_chess

Converting PGNs to more Natural Language for TTS generation

buildparser

Not useful to the outside world. Makes a script's output much more helpful.

cloudflair

🔎 Find origin servers of websites behind by CloudFlare using Internet-wide scan data from Censys.

codeql-uboot

collaboratorplusplus

cookie-session

Simple cookie-based session middleware

cve-2019-0708

POC for CVE-2019-0708

django-defectdojo

DefectDojo is a DevSecOps and vulnerability management tool.

doxycannon

A poorman's proxycannon and botnet, using docker, ovpn files, and a dante socks5 proxy

europi

EuroPi: A reprogrammable Eurorack module based on the Raspberry Pi Pico

exclude-cdn

Wraps projectdiscovery's cdncheck library to exclude CDN hosts from input passed over stdin

firefox-session-header

A Firefox plugin to add an HTTP header detailing the session container in use with a web request.

fuzzdb

Automatically exported from code.google.com/p/fuzzdb

gf

A wrapper around grep, to help you grep for things

git-fingerprint

Enumerate information from a target using git

how-to-get-a-job-in-pentesting

Notes from a talk at BSides Glasgow 2018

iis-server-ssl-guide-

Getting and adding an SSL certificate to a site on Windows Server 2012 with Let's Encrypt using ACMEbot.

infosec-learning-materials

Resource for developing infosec skills for OSCP

jarm

jsfsck

Forked from jsfuck: jsf$ck - Write any JavaScript without parenthesis, using +![]{}$`

keye

Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a list of urls, it will make a request to these urls and it will try to detect changes on these urls based on their Content-Length.

log4shell-everywhere

A Burp Suite extension which augments your proxy traffic by injecting log4shell payloads into headers

markdown-cheatsheet

Markdown Cheatsheet for Github Readme.md

noted

A CLI tool to add and retrieve tagged items from a local sqlite database

pacu

Rhino Security Labs' AWS penetration testing toolkit

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

public-bugbounty-programs

Community curated list of public bug bounty and responsible disclosure programs.

python-redir-server

Simple redirection python server for SSRF