spwn3r49sd3r00 Goto Github PK

css-injection-in-swagger-ui

CSS injection vulnerability in Swagger UI

cve-2020-17519

Apache Flink 目录遍历漏洞批量检测 (CVE-2020-17519)

cve-2021-3129

Laravel debug rce

cve-2023-0669

CVE-2023-0669 GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object.

dex2jar

Tools to work with android .dex and java .class files

dirsearch

Web path scanner

dorkers

Dorks for Google, Shodan and BinaryEdge

dorkx

Pipe different tools with google dork Scanner

dump1090

Dump1090 is a simple Mode S decoder for RTLSDR devices

dynamic-dtd

A python Flask app that generates dynamic DTDs for easy out-of-band data exfiltration.

ffmpeg-avi-m3u-xbin

ffuf

Fast web fuzzer written in Go

findom-xss

A fast DOM based XSS vulnerability scanner with simplicity.

gf-patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

ghunt

🕵️‍♂️ Investigate Google Accounts with emails.

git-hound

GitHound pinpoints exposed API keys on GitHub using pattern matching, commit history searching, and a unique result scoring system. A batch-catching, pattern-matching, patch-attacking secret snatcher.

git-scanner

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

gitscraper

A tool which scrapes public github repositories for common naming conventions in variables, folders and files

grayhat-con

Materials for my conference talks.

hack-tools

The all-in-one Red Team extension for Web Pentester 🛠

hackerone-reports

Top disclosed reports from HackerOne

hakrevdns

Small, fast tool for performing reverse DNS lookups en masse.

handyheaderhacker

Examine HTTP response headers for common security issues

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

hqlmap

(Deprecated) HQLmap, Automatic tool to exploit HQL injections

http-request-smuggling

HTTP Request Smuggling Detection Tool

impacket

Impacket is a collection of Python classes for working with network protocols.

ip-rotate

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

j2eescan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens