abdilahrf Goto Github PK

cloudbrute

Awesome cloud enumerator

cloudmare

Cloudflare, Sucuri, Incapsula real IP tracker.

code-audit-challenges

Code-Audit-Challenges

collabfiltrator

Exfiltrate blind remote code execution output over DNS via Burp Collaborator.

collaborator-everywhere

A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator

command-mobile-penetration-testing-cheatsheet

Mobile penetration testing android command cheatsheet

commonspeak2

Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

commonspeak2-wordlists

Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.

confused

Tool to check for dependency confusion vulnerabilities in multiple package management systems

cors-anywhere

CORS Anywhere is a NodeJS reverse proxy which adds CORS headers to the proxied request.

cstc

ctfwriteupscrapper

Website to Scrapping all writeup from http://ctftime.org/ and you can organize which to read first!

cve-2021-3129

Laravel <= v8.4.2 debug mode: Remote code execution (CVE-2021-3129)

datasette

An open source multi-tool for exploring and publishing data

detectify-cves

Find CVEs that don't have a Detectify modules.

dexcalibur

Dynamic binary instrumentation tool designed for Android application and powered by Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform.

do-whatever-you-want

Ah hacktoberfest, here we go again! ALL YOU NEED IS JUST PR

drupwn

Drupal enumeration & exploitation tool

enumerate-iam

Enumerate the permissions associated with AWS credential set

evil_stuff

extract-relative-url-heapsnapshot

Extract relative urls from a heap snapshot

fastjson_rce_tool

fastjson命令执行利用工具，一键操作,fastjson remote code execute poc, exp,rce

favhash

A Wordlist of favicon hash from various application.

favicon-hashtrick

Python script implementing the favicon hash trick to find subdomains.

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

filechangemonitor

Continuous monitoring for JavaScript files

flutter-ssl-bypass

Flutter SSL pinning bypass using IP forwarding

flutter_extractor

Extracting strings and function names from Flutter apks

flyingafalseflag

Slides and Code for the BHUSA 2019 talk: Flying a False Flag

freddy

Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans