streaak Goto Github PK

androidpinning

A standalone library project for certificate pinning on Android.

apac-conferences

A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.

assetnote-poc

(Proof of concept) push notifications for passive DNS data

big-list-of-naughty-strings

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

certasset

Takes ip range, Scan all open SSL Certs, Grab Cnames

crlf-injection-payloads

Payloads for CRLF Injection

crlf-injection-scanner

Command line tool for testing CRLF injection on list of domains.

ffmpeg-avi-m3u-xbin

gen_report

A quick, customizeable report generator for HackeOne. Increases productivity & efficiency.

gifoeb

exploit for ImageMagick's uninitialized memory disclosure in gif coder

github-search

Tools to perform basic search on GitHub.

h1-212-ctf-solutions

A collection of the solutions people wrote for the H1-212 Capture The Flag event

hackpad

A web application hacker's toolbox. Base64 encoding/decoding, URL encoding/decoding, MD5/SHA1/SHA256/HMAC hashing, code deobfuscation, formatting, highlighting and much more.

hacks

Small snippets and scripts which I use

hacks-1

A collection of hacks and one-off scripts

heartbleed-poc

Test for SSL heartbeat vulnerability (CVE-2014-0160)

icu

An Extended, Modulair, Host Discovery Framework

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

java_deserialization_exploits

A collection of Java Deserialization Exploits

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

osint-framework

OSINT Framework

oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

pastebin-scraper

Pastebin-scraper tool leverages the API of https://psbdmp.ws/ to find emails/domains dumped in pastebin.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

subover

A Powerful Subdomain Takeover Tool