mantissts Goto Github PK

bountyprocess

cookiestealer

CookieStealer written in Go

crtdestroyer

Just a toy for CRT.sh inspired by nahamsec

dotfiles

My local dotfiles

filemaker-php-api-interface

This was just a private class that I made which helped me develop for the web using the FM PHP API but I have added my own methods which saved time and made life easier.

go-token-brute

A Fast OTP Brute Forcer written in Go

gocloud

Checks whether a domain is hosted on a cloud service such as AWS, Azure or CloudFlare

gokeybruter

A very simple method of Brute Forcing the GoKey password manager by CloudFlare. Given a known password and guessed realm will reveal the user's master password which could be used to reveal further passwords by said user.

hacker0x01.github.io

Hackerone Repo Takeover

mantissts

Config files for my GitHub profile.

nessus2host

A program written in Go which takes a Nessus XML file and extracts the hosts in IP:PORT format.

openxml-xxe-generator

A tool to generate OpenXML XXE Payloads written in Python3.

owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

paramreplace

ParamReplace matches a given URL parameter and replaces it with a specific value

portswiggerlabs

Portswigger Labs following the YouTube videos

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

prismtools

Prism Nuclei Import Tool

redteamtools

Red Team Tools

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with mi

reportingtool

PHP Laravel Based Pentesting Report Writing Tool

shadowclone

Unleash the power of cloud

shodan_recon

Takes a set of IPs and performs recon to get domain names associated with the IP. Especially useful for when there is no reverse-dns record set.

snyklookup

A quick and dirty script to lookup CVEs on Snyk

takeover-poc

Takeover PoC

tools

Just some hacky tools to do some jobs

web-application-hacking-list

A list of web application checks sorted by functionality

wildcardburpimport

A tool to convert a list of wildcard domains into Burp's scope