flyg33k Goto Github PK

phpvuln

🕸️ Audit tool to find common vulnerabilities in PHP source code

plution

Prototype pollution scanner using headless chrome

pmg

Extract parameters/paths from urls

poc

Proof of Concepts

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

port-enumeration

Have you ever faced with the lack of possibility of using NMap? For instance if you have reverse shell as an unprivileged user and there are no useful tools preinstalled? This is a small script which will help you to scan a network if you have nothing.

portscanner

portscanner-port

posta

🐙 Cross-document messaging security research tool powered by https://enso.security

postmessage-logger

Simple "postMessage logger" Chrome extension

postmessage-poc

Proof of concept around postMessages between different domains

postmessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

postmessage-vulnerability-demo

HTML source files demonstrating HTML5 postmessage vulnerabilities

postmessage_fuzz_tool

#BugBounty #BugBounty Tools #WebDeveloper Tool

postmessagehook

by Gary O'Leary-Steele | cloned from https://sentinel.appcheck-ng.com/static/pm/logger.html

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

powerupsql

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

ppfuzz

A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀

ppscan

Client Side Prototype Pollution Scanner

pri0tx

Automation for Open Threat Exchange

protoscan

Prototype Pollution Scanner

prototype-pollution-nsec18

Content released at NorthSec 2018 for my talk on prototype pollution

proxify

Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation, and replay on the go.

proxylogscan

A fast tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin (CVE-2021-26855).

ps.sh

A wrapper around tools used for port scanning(nmap, naabu & masscan), the goal being reducing scan time, increasing scan efficiency and automating the workflow.

psiphon-tunnel-core

Psiphon is an Internet censorship circumvention system.

public-bugbounty-programs

Community curated list of public bug bounty and responsible disclosure programs.

public-ip-cli

Get your public IP address

pulse_exploit

pwn-machine

The Pwning Machine

pwnedornot

OSINT Tool for Finding Passwords of Compromised Email Addresses