00xph4ntom Goto Github PK

achecker

AChecker (Access Control Checker) is an automated static analysis tool for detecting access control vulnerabilities in smart contracts.

apullo

A scanner for taking basic fingerprints

awesome-poc

PoCs

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

blacklotus

BlackLotus UEFI Windows Bootkit

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cve

cve-2018-9995_dvr_credentials

(CVE-2018-9995) Get DVR Credentials

cve-2019-7192_qnap_exploit

QNAP pre-auth root RCE Exploit (CVE-2019-7192 ~ CVE-2019-7195)

cve-2020-0796-rce-poc

CVE-2020-0796 Remote Code Execution POC

cve-2021-4034

CVE-2021-4034 1day

cve-2022-0847-dirtypipe-exploits

A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.

cve-2023-24489-sharefile

This project is a Python script that exploits the CVE-2023-24489 vulnerability in ShareFile. It allows remote command execution on the target server. The script supports both Windows and Linux (On testing) platforms, and it can be used to exploit individual targets or perform mass checking on a list of URLs.

cve-2023-25157

CVE-2023-25157 - GeoServer SQL Injection - PoC

cve-2023-27372

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.

deepdarkcti

Collection of Cyber Threat Intelligence sources from the deep and dark web

douglas-042

Powershell script to help Speed ​​up Threat hunting incident response processes

epsseeker

simple Bash script that allows you to query EPSS

favicon_hash_shodan

Calculate Favicon Hash for Shodan

flask-unsign

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

gitshodankey

Search GitHub for public Shodan api keys

golden-guide-for-pentesting

Golden Guide

googledork-cheatsheet

Unleashing the Power of Google Advanced Search Techniques!

honeypots-detection

Nuclei templates for honeypots detection.

hydra-cheatsheet

Hydra Password Cracking Cheetsheet

infosec_reference

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

jarm

jwt-secrets

list of JWK secret keys

linux-privesc-notes

my notes about Linux privilege escalation