jeffreyshran Goto Github PK

ffmpeg-avi-m3u-xbin

gadgetinspector

A byte code analyzer for finding deserialization gadget chains in Java applications

gadgetprobe

Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

go-stare

A fast & light web screenshot without headless browser but Chrome DevTools Protocol!

goaltdns

A permutation generation tool written in golang

gojeffgo

Debian golang version is always behind, this short shell script will pull the latest direct from Google.

h2rs

Detects request smuggling via HTTP/2 downgrades.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

http-request-smuggling

Blog about HTTP Request Smuggling, including a demo application.

http-smuggling-calculator

Perform TE.CL HTTP Request Smuggling attacks by crafting HTTP Request automatically.

httprebind

Automatic tool for DNS rebinding-based SSRF attacks

injectus

CRLF and open redirect fuzzer

interaction

Provides a convention for modelling user interactions as use case classes.

ipsourcebypass

This Python script can be used to bypass IP source restrictions using HTTP headers.

j-is-the-boss

java-deserialization-exploits

A collection of curated Java Deserialization Exploits

javadeserh2hc

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

jeeves

Jeeves SQLI Finder

jeffreyshran

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

leaky-paths

A collection of special paths linked to major web CVEs, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

linkfinder

A python script that finds endpoints in JavaScript files

markdownload

A Firefox and Google Chrome extension to clip websites and download them into a readable markdown file.

mjet

MOGWAI LABS JMX exploitation toolkit

of-cors

pipelines-java

Sample Java application referred to by Azure Pipelines documentation

ppmap

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

public-bugbounty-programs

Community curated list of public bugbounty and responsible disclosure programs.

punfurl

pyhprof

Parse HPROF files from the Spring Boot Heapdump Actuator