la3b0z Goto Github PK

scilla

🏴‍☠️ Information Gathering tool 🏴‍☠️ DNS / Subdomains / Ports / Directories enumeration

scodescanner

SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities.

scripts

common scripts

scripts-1

Scripts I use during pentest engagements.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

security-tools

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

securitytesting

sharplaps

Retrieve LAPS password from the LDAP

sharpphish

Using outlook COM objects to create convincing phishing emails without the user noticing. This project is meant for internal phishing.

sherlock

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

shodan-dorks

Dorks for shodan.io. Some basic shodan dorks collected from publicly available data.

simple-captcha-solver

simple CAPTCHA solver in python :snake:

sitedorks

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term with a default set of websites, bug bounty programs or a custom collection.

skcodecfuzzer

Fuzzing harness for testing proprietary image codecs supported by Skia on Android

slackcat

A simple way of sending messages from the CLI output to your Slack with webhook.

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

sn1per

Automated pentest framework for offensive security experts

ssrf-finder

Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.

ssrfire

An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects

striker

Striker is an offensive information and vulnerability scanner.

struts2-rce

A Burp Extender for checking for struts 2 RCE vulnerabilities.

subenum

bash script for Subdomain Enumeration

subjack

Subdomain Takeover tool written in Go

subover

A Powerful Subdomain Takeover Tool

subs_all

Subdomain Enumeration Wordlist. 8956437 unique words. Updated.

superwordlist

基于实战沉淀下的各种弱口令字典

svg-cheatsheet

A cheatsheet for exploiting server-side SVG processors.

switching-ip-address

Python Script which changes the Public IP address randomly to different location around the world in every 10 Seconds Interval with the help tor package

target

tcp-client-server-python3

A TCP Client and Server Python3