m00tiny Goto Github PK

arjun

HTTP parameter discovery suite.

awesome-shell

A curated list of awesome command-line frameworks, toolkits, guides and gizmos. Inspired by awesome-php.

bashark

Bash post exploitation toolkit

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

breacher

An advanced multithreaded admin panel finder written in python.

cmseek

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and 130 other CMSs

corsy

CORS Misconfiguration Scanner

crass

Code Review Audit Script Scanner

decodify

Detect and decode encoded strings, recursively.

django-defectdojo

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

dorkbot

Command-line tool to scan Google search results for vulnerabilities

dvwa

Damn Vulnerable Web Application (DVWA)

evil-xmlrpc

evil-xmlrpc is a tool that I created to help me bruteforce Wordpress user accounts using xmlrpc.php while bypassing iThemes Security preventing lockouts

find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Groovy and Scala projects)

framework7

Full featured HTML framework for building iOS & Android apps

fuxploider

File upload vulnerability scanner and exploitation tool.

gatekeeper-ctf

exploit for gatekeeper ctf

git-dumper

A tool to dump a git repository from a website

glutton

All eating honeypot

grayhatfreelancing

gtfobins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

hash-buster

Crack hashes in seconds.

honeyhttpd

HoneyHTTPD is a Python-based web server honeypot builder.

huepy

Print awesomely in terminals.

inspektor

Inspektor code checker

johntheripper

This is the official repo for the Jumbo version of John the Ripper. The "bleeding-jumbo" branch (default) is based on 1.8.0-Jumbo-1 (but we are literally several thousands of commits ahead of it).

limeaide

A python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host.

linwinpwn

linWinPwn is a bash script that automates a number of Active Directory Enumeration and Vulnerability checks

mdk4

MDK4

modlishka

Modlishka. Reverse Proxy. Phishing NG.