kursadalsan Goto Github PK

2023

above

Invisible network protocol sniffer

ad_miner

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

aix

AIx is a cli tool to interact with Large Language Models (LLM) APIs.

allforone

apidetector

APIDetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains. Supports HTTP/HTTPS, multi-threading, and flexible input/output options. Ideal for API security testing.

apkid

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

aptrs

Automated Penetration Testing Reporting System

arjun

HTTP parameter discovery suite.

asnlookup

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

audio-slicer

A simple GUI application that slices audio with silence detection

automated-multi-uac-bypass

Automated Multi UAC BYPASS for win10|win11|ws2019|ws2022

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

azure-accesspermissions

bbrf-client

The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

bestedrofthemarket

Little AV/EDR bypassing lab for training & learning purposes

blackstone

Pentesting Reporting Tool

blackwidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

bread

🍞 BREAD: BIOS Reverse Engineering & Advanced Debugger

burp-wordlist-generator

This Burp extension extracts various data (path, parameter keys, parameter values, subdomains, etc.) from the sitemap. This data is used to create custom wordlists for directory/dns/parameter brute-forcing.

catsploit

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

code-word

Android code-breaking game

collector

Collect XSS vulnerable parameters from entire domain.

combine_harvester

Rust in-memory dumper

csprecon

Discover new target domains using Content Security Policy

cve-2022-39952

POC for CVE-2022-39952

cve-2023-22515

CVE-2023-22515: Confluence Broken Access Control Exploit

cve-2023-28121

WooCommerce Payments: Unauthorized Admin Access Exploit

cve-2023-38408

CVE-2023-38408 Remote Code Execution in OpenSSH's forwarded ssh-agent