sec99 Goto Github PK

cotopaxi

Set of tools for security testing of Internet of Things devices using specific network IoT protocols

crithit

Takes a single wordlist item and tests it one by one over a large collection of hosts before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

crt.sh

(Unofficial) Python API for https://crt.sh

ctf-difficulty

This cheasheet is aimed at the CTF Players and Beginners to help them sort the CTF Challenges on the basis of Difficulties.

cve-2018-3252

CVE-2018-3252-PoC

cve-2019-0230

CVE-2019-0230 Exploit POC

cve-2019-7616

POC for CVE-2019-7616 / ESA-2019-09

cve-2020-14882

CVE-2020–14882、CVE-2020–14883

cve-2020-14882_all

CVE-2020-14882_ALL综合利用工具，支持命令回显检测、批量命令回显、外置xml无回显命令执行等功能。

cve-2020-14883

cve-2020-2551

Weblogic IIOP CVE-2020-2551

cve-2020-2552

how detect CVE-2020-2551 poc exploit python Weblogic RCE with IIOP, power by 【劦久信安】 online check:

cve-2020-2883

Weblogic coherence.jar RCE

cve-2021-22986

CVE-2021-22986 & F5 BIG-IP RCE

cve-2021-31166

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

cve-2021-3449

CVE-2021-3449 PoC exploit

cve_2020_2546

CVE-2020-2546，CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic T3 payload exploit poc python3, power by 【劦久信安】

daily-commonspeak2

commonspeak2 subdomains wordlist generated daily

default-http-login-hunter

Login hunter of default credentials for administrative web interfaces leveraging NNdefaccts dataset.

deksterecon

Web Application recon automation

depix

Recovers passwords from pixelized screenshots

discover

Easy discovery of assets

dnscan

dnsstager

Hide your payload in DNS

dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

docker-burp-suite-pro

Burp Suite Professional in a Docker container.

docker_fetch

Data extraction tool for Docker Registry API

domainhunter

Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

domainparser

A very high performance Domain Name parser package in Go.

dynamic-dtd

A python Flask app that generates dynamic DTDs for easy out-of-band data exfiltration.