dinghi-security Goto Github PK

4-zero-3

403/401 Bypass Methods + Bash Automation + Your Support ;)

403bypasser

authz0

🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URL and Role.

autolocalprivilegeescalation

An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically

awesome-asset-discovery

List of Awesome Asset Discovery Resources

awesome-ctf

A curated list of CTF frameworks, libraries, resources and softwares

awesome-pentest

axiom

The dynamic infrastructure framework for anybody! Distribute the workload of many different tools with ease, including nmap, ffuf, masscan, nuclei and many more!

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cookiemonster

🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.

ctf-katana

This repository aims to hold suggestions (and hopefully/eventually code) for CTF challenges. The "project" is nicknamed Katana.

cve-2021-21985

CVE-2021-21985 VMware vCenter Server远程代码执行漏洞 EXP

difftastic

a diff that understands syntax 🟥🟩

dirscan

🎃 目录扫描工具 Dirscan ，A simple and fast directory scanning tool for pentesters

efiens_2019_round_2_web_challenges_write_up

Efiens CTF 2019 Round 2 - Web Challenges Write Up

espoofer

An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-5902、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

ffuf

Fast web fuzzer written in Go

filterbypass

Browser's XSS Filter Bypass Cheat Sheet

find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

gadgetinspector

一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静态检测功能。并且加入了很多功能以方便进行漏洞自动化挖掘。

gitdorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

hack-tools

The all-in-one Red Team extension for Web Pentester 🛠

hackingtool

ALL IN ONE Hacking Tool For Hackers

infosec

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

jndi-injection-bypass

Some payloads of JNDI Injection in JDK 1.8.0_191+

jndiexploit

A malicious LDAP server for JNDI injection attacks