kc-max Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

awesome-malware-and-reverse-engineering

awesome-xss-payloads

Exotic and uncommon XSS Vectors to hit the target as quickly as possible.

blisqy

Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).

byewaf

cmsmap

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

exploit-development

Resources for learning about Exploit Development

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

gitgot

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

godkiller

A repository containing zero-day vulnerabilities and proof-of-concepts (PoCs) of undisclosed CVEs discovered during penetration testing or my security research

hunt

mapfinder

MAPFINDER is a Python script designed for conducting brute force attacks on files and directories of websites. This tool can help in identifying hidden or sensitive content on web servers by attempting to enumerate and access directories and files that may not be publicly linked.

nuclei-bug-hunter

i will upload more templates here to share with the comunity.

oscp

oscp-cheatsheet

OSCP Cheatsheet by Sai Sathvik

penetrationtesting_notes-

My Notes about Penetration Testing

public-pentesting-reports

A list of public penetration test reports published by several consulting firms and academic security groups.

scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

scanreflectedssti

Template Nuclei SSTI

shortscan

An IIS short filename enumeration tool

spellbound

A C2 framework for all your God Complex. A fully functional and integrated Botnet for remote command execution through user friendly UI.

sqliv

massive SQL injection vulnerability scanner

test

test1

upload_bypass

File upload restrictions bypass, by using different bug bounty techniques covered in Hacktricks.

valentines

wgu

WGU Projects

wordlists

Real-world infosec wordlists, updated regularly

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档