abdilahrf Goto Github PK

ssrf_vulnerable_lab

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack

ssrfmap

Automatic SSRF fuzzer and exploitation tool

sub.monitor

Passive subdomain continous monitoring tool.

subdomain-2-cidr-2-subdomain

Gather Subdomains > convert to IP Address > Convert IP's to CIDR's > Convert CIDR's to Subdomains

sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

svg-cheatsheet

A cheatsheet for exploiting server-side SVG processors.

synackapi

tbhm

The Bug Hunters Methodology

telegram-react

Experimental Telegram web client with tdlib, webassembly and react js under the hood

the-hacker-recipes

This project is aimed at freely providing technical guides on various hacking topics: Active Directory services, web services, servers, intelligence gathering, physical intrusion, phishing, mobile apps, iot, social engineering, etc.

tls-poison

trufflehog

Find credentials all over the place

upload-labs

一个想帮你总结所有类型的上传漏洞的靶场

urldedupe

Pass in a list of URLs with query strings, get back a unique list of URLs and query string combinations

vhostfinder

Identify virtual hosts by similarity comparison

vulapps

快速搭建各种漏洞环境(Various vulnerability environment)

web-attack-cheat-sheet

Web Attack Cheat Sheet

web-fuzzing-box

Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...字典运用于实战案例：https://gh0st.cn/archives/2019-11-11/1

weblogicscan

Weblogic一键漏洞检测工具，V1.3

weblogicscanner

weblogic 漏洞扫描工具。目前包含 CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890

websitesvulnerabletossti

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

windows-privilege-escalation

Windows Privilege Escalation Techniques and Scripts

windowsexploits

Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.

writeup

Collection of Some Good research Documentation

writeups

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

xss.png

A XSS mind map ;)

xss.swf

a tiny tool for swf hacking, just browse it:)

xxe-workshop

Workshop given at Hack in Paris 2019