tounsi007 Goto Github PK

gobackupscan

Multi Backup Scanner

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

h1domains

HackerOne "in scope" domains

hack-the-box-oscp-preparation

Hack-the-Box-OSCP-Preparation

hacks

A collection of hacks and one-off scripts

hacktivity-notify

Get newest public disclosed HackerOne report notifications on your Desktop

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

hawkscan

Security Tool for Reconnaissance and Information Gathering on a website. (python 2.x & 3.x)

hello-bash

Bash scripting tutorial

homework-of-python

Python codes of my blog.

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

http-request-smuggling

HTTP Request Smuggling Detection Tool

httpx

httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

httq-server

hunterio

Hunter lets you find professional email addresses in seconds and connect with the people that matter for your business.

iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

impacket

Impacket is a collection of Python classes for working with network protocols.

inql

InQL - A Burp Extension for GraphQL Security Testing

javaunserializeexploits

jboss-_cve-2017-12149

CVE-2017-12149 jboss反序列化 可回显

jbossexploit

MSF moudle jboss invoke deploy getshell Exploit & Jboss jmx-console getshell exploit

jenkins-decrypt

Credentials dumper for Jenkins

jira-cve-2019-8451

POC to check for Jira instances vulnerable to CVE-2019-8451

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Rconnaissance (framework)

keycloak-12.0.1-cve-2020-10770

Keycloak 12.0.1 - 'request_uri ' Blind Server-Side Request Forgery (SSRF) (Unauthenticated)

kingofbugbountytips

labs

Vulnerability Labs for security analysis

lazy-redteamerscripts

leaky-paths

A collection of special paths linked to major web CVEs, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.