cqr-cryeye-forks Goto Github PK

joomlacve20168869

Exploit for Joomla 3.4.4 - 3.6.4 (CVE-2016-8869 and CVE-2016-8870)

joomlavs

A black box, Ruby powered, Joomla vulnerability scanner

joomscan

OWASP Joomla Vulnerability Scanner Project

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

jsfscan.sh

Automation for javascript recon in bug bounty.

jshole

A JavaScript components vulnerability scanner, based on RetireJS

jsparser

jsscanner

You can read the writeup on this script here

kadimus

kadimus is a tool to check and exploit lfi vulnerability.

karma

Find leaked emails with your passwords

karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

kicks3

S3 bucket finder from html,js and bucket misconfiguration testing tool

kics

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

kliqqi-cms

Kliqqi formerly known as Pligg CMS - New version available at Kliqqi.com

knock

Knock Subdomain Scan

knockknock

A simple reverse whois lookup tool which returns a list of domains owned by people or companies

konan

Konan - Advanced Web Application Dir Scanner

kscan

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹2000+，暴力破解协议10余种。

kube-linter

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.

kube-score

Kubernetes object analysis with recommendations for improved reliability and security

kubeaudit

kubeaudit helps you audit your Kubernetes clusters against common security controls

kubesec

Security risk analysis for Kubernetes resources

kyubi

A tool to discover and exploit Nginx alias traversal misconfiguration, the tool can bruteforce the URL path recursively to find out hidden files and directories.

ladongo

LadonGO 4.2 Pentest Scanner framework 全平台Go开源内网渗透扫描器框架,Windows/Linux/Mac内网渗透，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机，端口扫描服务识别PortScan。

lance

Vulnerability Detection Framework based on Python3.（基于Python3的漏洞检测框架）

laravel-8.4.2-rce-cve-2021-3129

laravel-exploits

Exploit for CVE-2021-3129

laraveln00b

LaravelN00b .env Scanner

lazywpscan

Lazy WPScan is a automated Wordpress Scanner Tool for your easy way to pentest Wordpress CMS

lbmap

Advanced HTTP fingerprinting PoC