miladbr Goto Github PK

230-oob

An Out-of-Band XXE server for retrieving file contents over FTP.

awesome-cve-poc

✍️ A curated list of CVE PoCs.

badpods

A collection of manifests that will create pods with elevated privileges.

bheu19-attacking-cloud-builds

Slides, Cheatsheet and Resources from our Blackhat EU talk

blockpublictorrent-iptables

A script to block public torrent using iptables and hosts file.

bruteforce-database

Bruteforce database

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

devsecopsguideline

The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.

dsvpn

A Dead Simple VPN.

frida-scripts

A collection of my Frida.re instrumentation scripts to facilitate reverse engineering of mobile apps.

fuzzdicts

Web Pentesting Fuzz

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

glorytun

Multipath UDP tunnel

hash

HASH (HTTP Agnostic Software Honeypot)

installerfiletakeover

kube_security_lab

kubolt

Kubolt utility for scanning public kubernetes clusters

my-poc-exploits

PoC exploits I wrote. They're as is and I will not offer support

naive

Start Naiveproxy within 5 minutes

naiveproxy

Make a fortune quietly

peirates

Peirates - Kubernetes Penetration Testing tool

public-poc

py_django_crack

Crack the django password on the way. By default Django use pbkdf2 and sha256 method to encrypt user's password. Once get the password stored in the database table, you need to compare it with others if brute force cracking. It is recommended that you use hash table comparison. The tool 'rainbow crack' can generate rainbow hash tables while another tool 'hashcat' brute-force cracks password from a dictionary alive. Because django uses PBKDF2(Password-Based Key Derivation Function), it would take too long to generate a password.

qemu-t8030

iPhone 11 emulated on QEMU

red-kube

Red Team K8S Adversary Emulation Based on kubectl

rego-policies

Rego policies collection

scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

slicer

A tool to automate the boring process of APK recon

trojan-manager

A command line interface that manages trojan users and more.

vrl-web

An interactive environment for Vector Remap Language (VRL)