tung090120 Goto Github PK

bfac

BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source code.

burpbounty

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

check-wp-cve-2020-35489

The (WordPress) website test script can be exploited for Unlimited File Upload via CVE-2020-35489

dnsbin

The request.bin of DNS request

iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

jaeles

The Swiss Army knife for automated Web Application Testing

jndiexploit

A malicious LDAP server for JNDI injection attacks

ngrok

Introspected tunnels to localhost

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

ris-pom

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shell

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool