lewerkun Goto Github PK

acamar

A Python3 based single-file subdomain enumerator

aquatone

A Tool for Domain Flyovers

assetfinder

Find domains and subdomains related to a given domain

autochrome

This tool downloads, installs, and configures a shiny new copy of Chromium.

automatic-api-attack-tool

Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an output.

begium

chaos_recondata

CHAOS - Recon data for Public Bug Bounty Programs | Stopped the action for some updates

cnvd-c-2019-48814-cnnvd-201904-961

CVE-2019-2725poc汇总 更新绕过CVE-2017-10271补丁POC

cve-2018-13379

CVE-2018-13379

cve-2019-0193

Apache Solr DataImport Handler RCE

cve-2019-13272

CVE-2019-13272

cve-2019-3396

Confluence Widget Connector RCE

cve-2019-5736-poc

Unweaponized Proof of Concept for CVE-2019-5736 (Docker escape)

darkc0de-old-stuff

A collection of darkc0de old scripts (for education purposes only)

dirsearch

Web path scanner

dnsgen

Generates combination of domain names from the provided input.

ds_store

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

entro.py

Search files for high entropy strings.

enumerate-iam

Enumerate the permissions associated with AWS credential set

evilarc

Create tar/zip archives that can exploit directory traversal vulnerabilities

gf

A wrapper around grep, to help you grep for things

github-search

Tools to perform basic search on GitHub.

hacking-with-go

Golang for Security Professionals

hacks

A collection of hacks and one-off scripts

hackvertor

httprebind

Automatic tool for DNS rebinding-based SSRF attacks

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

interactsh

An OOB interaction gathering server and client library

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.