sandrogarcia Goto Github PK

4-zero-3

403/401 Bypass Methods + Bash Automation + Your Support ;)

android-backup-extractor

Android backup extractor

android-keystore-audit

apkeep

appsync

Unified AppSync dynamic library for iOS 5 and above.

avatarify-python

Avatars for Zoom, Skype and other video-conferencing apps.

avillaforensics

Avilla Forensics 3.0

awesome-api-security

A collection of awesome API Security tools and resources.

badsecrets

A library for detecting known secrets across many web frameworks

bbrf-client

The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

bbrf-server

The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

bbtz

BBT - Bug Bounty Tools (examples💡)

botpress

The open-source hub to build & deploy GPT/LLM Agents ⚡️

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

clairvoyance

Obtain GraphQL API schema even if the introspection is disabled

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

deepdarkcti

Collection of Cyber Threat Intelligence sources from the deep and dark web

disable-flutter-tls-verification

A Frida script that disables Flutter's TLS verification

dot

The Deepfake Offensive Toolkit

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

exploit-notes

Sticky notes for pentesting.

ezxss

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

frida-scripts

fsmon

monitor filesystem on iOS / OS X / Android / FirefoxOS / Linux

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

gotestwaf

An open-source project in Golang to test different web application firewalls (WAF) for detection logic and bypasses

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can used to bypass local security restrictions in misconfigured systems

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

idb

idb is a flexible command line interface for automating iOS simulators and devices