ko-kn3t Goto Github PK

devsecops-gitlab-java-vulnerable-application

DevSecOps Training

dirsearch

Web path scanner

dirtycow

dirtycow.github.io

Dirty COW

docker-quick-start

dockerevil

My security researches involving Docker (LPE)+OPENSHIFT

dvna

Damn Vulnerable NodeJS Application

egresscheck-framework

Used to check for TCP and UDP egress filtering on both windows and unix client systems

envizon

network visualization & pentest reporting

evil-winrm

The ultimate WinRM shell for hacking/pentesting

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

ffuf

Fast web fuzzer written in Go

frilist

Collection of useful FRIDA Mobile Scripts

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gobuster

Directory/File, DNS and VHost busting tool written in Go

gtfobins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

hacker101

Hacker101

hackthebox-exploits

Custom exploits that I made for Hack The Box machines!

helk

The Hunting ELK

howtohunt

Collection of methodology and test case for various web vulnerabilities.

icmpdoor

ICMP Reverse Shell written in Python 3 and with Scapy (backdoor/rev shell)

impacket

Impacket is a collection of Python classes for working with network protocols.

insecure-firebase-exploit

A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the app have set the security rules as true for both "read" & "write" an attacker can probably dump database and write his own data to firebase db.

installerfiletakeover

iosenv

iosEnv was written to quickly get information regarding path of installed iOS application using applicationState.db file

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

javadeserh2hc

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

jmx-exploiter

A tool that helps you attacking unprotected JMX endpoints

john

John the Ripper 1.9.0-jumbo-1+bleeding-47a8a9b98 2019-08-26 20:19:16