Th3eCrow's Projects
🏴☠️ Information Gathering tool 🏴☠️ DNS / Subdomains / Ports / Directories enumeration
SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities.
common scripts
Scripts I use during pentest engagements.
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.
Retrieve LAPS password from the LDAP
Using outlook COM objects to create convincing phishing emails without the user noticing. This project is meant for internal phishing.
PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.
Dorks for shodan.io. Some basic shodan dorks collected from publicly available data.
simple CAPTCHA solver in python :snake:
Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term with a default set of websites, bug bounty programs or a custom collection.
Fuzzing harness for testing proprietary image codecs supported by Skia on Android
A simple way of sending messages from the CLI output to your Slack with webhook.
Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3
Automated pentest framework for offensive security experts
Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.
An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects
Striker is an offensive information and vulnerability scanner.
A Burp Extender for checking for struts 2 RCE vulnerabilities.
bash script for Subdomain Enumeration
Subdomain Takeover tool written in Go
A Powerful Subdomain Takeover Tool
Subdomain Enumeration Wordlist. 8956437 unique words. Updated.
基于实战沉淀下的各种弱口令字典
A cheatsheet for exploiting server-side SVG processors.
Python Script which changes the Public IP address randomly to different location around the world in every 10 Seconds Interval with the help tor package
A TCP Client and Server Python3