th3blackp3arl Goto Github PK

fast-google-dorks-scan

The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.

file-smuggling

HTML smuggling is not an evil, it can be useful

filegps

A tool that help you to guess how your shell was renamed after the server-side script of the file uploader saved it

filephish

🐠 A simple Google query builder for document file discovery

flipper_zero_badusb_hack5_payloads

hack5 badusb payloads moded for be played with flipper zero

follina.py

Quick POC to replicate the 'Follina' Office RCE vulnerability for local testing purposes

frilist

Collection of useful FRIDA Mobile Scripts

frogy

My subdomain enumeration script. It's unique in the way it is built upon.

fuckthatpacker

A simple python packer to easily bypass Windows Defender

functionstomping

A new shellcode injection technique. Given as C++ header or standalone Rust program.

g3adxlsm-userinfotool

MicroSoft Excel VBA code used to harvest current GGGSC employee listing from USGS Active Directory.

ghostcat-cnvd-2020-10487

Ghostcat read file/code execute,CNVD-2020-10487(CVE-2020-1938)

gip

Google IP Search Engine

go-procinject

Process Injection Techniques with Golang

go_bypass

Golang Bypass Av Generator template

googlebitb

googlephishing

gophish_mods

Open-Source Phishing Toolkit

gorianet

🐼 IoT worm written in pure golang.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

haxunit

hcxdumptool

Small tool to capture packets from wlan devices.

hcxtools

Portable (that doesn't include proprietary/commercial operating systems) solution for conversion of cap/pcap/pcapng (gz compressed) WiFi dump files to hashcat formats (recommended by hashcat) and to John the Ripper formats. hcx: h = hash, c = convert and calculate candidates, x = different hashtypes

hob0rules

Password cracking rules for Hashcat based on statistics and industry patterns

hopla

HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite

horus

huntthebug

Basic Recon For Bug Bounty Hunter - "HuntTheBug" is Basic Scripts For Sub Domain Enumeration> Live Domain Enumeration > Sub Domain Hijack > URL + JavaScript Scan > Dir Brute Forcing > Open Port Check With Telegram Bot Notification

image-upload-exploits

This repository contains various media files for known attacks on web applications processing media files. Useful for penetration tests and bug bounty.

inceptor

Template-Driven AV/EDR Evasion Framework

injector

Complete Arsenal of Memory injection and other techniques for red-teaming in Windows