abdilahrf Goto Github PK

pwp

Python Web framework P0wner

pycript

Burp Suite extension that allows for bypassing client-side encryption using custom logic for manual and automation testing with Python and NodeJS. It enables efficient testing of encryption methods and identification of vulnerabilities in the encryption process.

race-the-web

Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.

rbndr

Simple DNS Rebinding Service

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

regexp-security-cheatsheet

rengine

reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.

reserv

A set of simple servers (currently HTTP/HTTPS and DNS) which allow configurable and scriptable responses to network requests.

rmi-jndi-ldap-jrmp-jmx-jms

rmi、jndi、ldap、jrmp、jmx、jms一些demo测试

rms-runtime-mobile-security

Runtime Mobile Security (RMS) is a powerful web interface that helps you to manipulate Android Java Classes and Methods at Runtime

rs256-2-hs256

JWT Attack to change the algorithm RS256 to HS256

rsa_sign2n

Deriving RSA public keys from message-signature pairs

sadcloud

A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure

scoutsuite

Multi-Cloud Security Auditing Tool

security-research-pocs

Proof-of-concept codes created as part of security research done by Google Security Team.

securitytips

secutils

Random utilities from my security projects that might be useful to others

sensitive-token

serialkillerbypassgadgetcollection

Collection of bypass gadgets to extend and wrap ysoserial payloads

services-names-wordlist

services-names-wordlist

shania

Scan secrets from Continuous Integration Build Logs

shottheworld

PHP tool that takes screenshots of a given ips/ports combo list and then try to guess the service.

sigma

Generic Signature Format for SIEM Systems

sql-injection-payload-list

🎯 SQL Injection Payload List

squarectf

The "code" for squarectf.com

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

ssrfmap

Automatic SSRF fuzzer and exploitation tool

subdomain-2-cidr-2-subdomain

Gather Subdomains > convert to IP Address > Convert IP's to CIDR's > Convert CIDR's to Subdomains

sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.