eternyle Goto Github PK

about

aboutsecurity

A list of payload and bypass lists for penetration testing and red team infrastructure build.

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

bruteforce-lists

Some files for bruteforcing certain things.

can-i-take-over-dns

"Can I take over DNS?" — a list of DNS providers and how to claim (sub)domains via missing hosted zones

cdnstrip

Striping CDN IPs from a list of IP Addresses

chameleon

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

command-injection-payload-list

🎯 Command Injection Payload List

content-type-research

Content-Type Research

dastardly-on-demand

debugger

dns-resolver

dnstrace

DNS resolution tracing tool

dp_crypto

Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)

hacks

A collection of hacks and one-off scripts

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

ipcdn

Check which CDN providers an IP list belongs to

isc2-cc-study-material

ISC2-CC-Study-Material

jscraper

JScraper is a Go tool that collects links to JavaScript files from stdin

kics

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

kingofbugbountytips

kozintemplates

Nuclei Templates

kxss

This a adaption of tomnomnom's kxss tool with a different output format

leaky-paths

A collection of special paths linked to common internal paths, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

malicious-pdf

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

metasploit-framework

Metasploit Framework

misc

Collection of useful scripts.