prongedfork Goto Github PK

certspotter

Certificate Transparency Log Monitor

chaos-recon

This little script for gathering chaos.projectdiscovery.io recon data in an organized way and finding the daily differences on it

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

chopchop

ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.

cmseek

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

commonspeak

Content discovery wordlists generated using BigQuery

cors-exploit

corsy

CORS Misconfiguration Scanner

crits

CRITs - Collaborative Research Into Threats

crlfuzz

A fast tool to scan CRLF vulnerability written in Go

crtfinder

Simple script tool to extract all subdomains from crt.sh website. Output will be up to sub.sub.sub.subdomain.com

crtsh

A Python Script to Get Subdomain using https://crt.sh

csv_deduplication

[WIP] Merge CSV files and remove duplicates

cve-2020-2551

how detect CVE-2020-2551 poc exploit python Weblogic RCE with IIOP

cve-2022-30525

CVE-2022-30525 POC

cwff

Create your Custom Wordlist For Fuzzing

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

degoogle_hunter

Simple fork from degoogle original project with bug hunting purposes

dnsresolvers

A bash script that fetches and maintains thousands of DNS resolvers

dnsvalidator

Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.

dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

dockerfiles

:whale: A collection of delicious docker recipes

dod-recon

Recon for Department of Defense HackerOne program

drupscan

Drupal Vulnerability Scanner

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

dvwa-guide-2019

Solutions and notes for the Damn Vulnerable Web App pentesting tool, intended to be accurate as of 2Q 2019.

extended-ssrf-search

Smart ssrf scanner using different methods like parameter brute forcing in post and get...

extended-xss-search

A better version of my xssfinder tool - scans for different types of xss on a list of urls.

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

f5-bigip-rce-cve-2020-5902

F5 BIG-IP RCE CVE-2020-5902 automatic check tool