ronoski Goto Github PK

alldomains

all domains and his subdoamins

android-reports-and-resources

A big list of Android Hackerone disclosed reports and other resources.

api-key-regex

extracting api key using grep

attack_data

A repository of curated datasets from various attacks

awesome-api-security

A collection of awesome API Security tools and resources.

awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red Team operations, Bug Bounty and more

awesome-security-trivia

🤙 Security Trivia that rare people know.

binaryedge

We gather the data for you.

blisqy

Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).

burp-nosqliscanner

This extension provides a way to discover NoSQL injection vulnerabilities.

clj-shodan-crawler

A wee crawler for shodan.io

cloud-sec-wiki

Jekyll Files for cloudsecwiki.com

cve-2017-10271

CVE-2017-10271 WEBLOGIC RCE (TESTED)

cve-2018-14667

All about CVE-2018-14667; From what it is to how to successfully exploit it.

cve-2018-19276

CVE-2018-19276 - OpenMRS Insecure Object Deserialization RCE

cve-2019-10758

cve-2020-13942

CVE-2020-13942 unauthenticated RCE POC through MVEL and OGNL injection

cve-2021-21972

CVE-2021-21972

cve-2021-2394

cves

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

exploit

A collection of exploits created or modified by me

extract-relative-url-heapsnapshot

Extract relative urls from a heap snapshot

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

hunterio

Hunter lets you find professional email addresses in seconds and connect with the people that matter for your business.

j2ee-rscan

j2eescan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

javaunserializeexploits

kb

Respositoy of all my notes on infosec I have been building up over the years

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

learn-java-bug