c0deur Goto Github PK

subdomain

Subdomain Takeover

subjack

Subdomain Takeover tool written in Go

subover

A Powerful Subdomain Takeover Tool

sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

sundaystreams

Data from my Sunday streams

svg-cheatsheet

A cheatsheet for exploiting server-side SVG processors.

tbhm

The Bug Hunters Methodology

the-book-of-secret-knowledge

:zap: A collection of awesome lists, manuals, blogs, hacks, one-liners, cli/web tools and more. Especially for System and Network Administrators, DevOps, Pentesters or Security Researchers.

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

unlocker

VMware Workstation macOS

untrusted-types

useful

useful pentest note

vulnerable-kext

A WIP "Vulnerable by Design" kext for iOS/macOS to play & learn *OS kernel exploitation

waf-research

WAF Research

web-application-pentest-checklist

weird_proxies

Reverse proxies cheatsheet

win32-stuxnet

Stuxnet is an extremely sophisticated computer worm that exploits multiple previously unknown Windows zero-day vulnerabilities to infect computers and spread. Its purpose was not just to infect PCs but to cause real-world physical effects. Specifically, it targets centrifuges used to produce the enriched uranium that powers nuclear weapons and reactors.

wordlist

wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

x8

Hidden parameters discovery suite

xsleaks

A collection of browser-based side channel attack vectors.

zphisher

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !