darkoneiroi Goto Github PK

cve-2019-1003000-jenkins-rce-poc

Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)

cve-2019-7609

exploit CVE-2019-7609(kibana RCE) on right way by python2 scripts

cve-2021-3129

Laravel <= v8.4.2 debug mode: Remote code execution (CVE-2021-3129)

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

dalfox

🌙🦊 DalFox is an powerful open source XSS scanning tool and parameter analyzer, utility

damn-vulnerable-graphql-application

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

darthsidious

Building an Active Directory domain and hacking it

default-http-login-hunter

Login hunter of default credentials for administrative web interfaces leveraging NNdefaccts dataset.

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

degoogle_hunter

Simple fork from degoogle original project with bug hunting purposes

dirhunt

Find web directories without bruteforce

dirsearch

Web path scanner

dirtycow.github.io

Dirty COW

dnscat2

dnspy

.NET debugger and assembly editor

dockerscan

Docker security analysis & hacking tools

domain-fronting-tools

A small collection of scripts that are useful for implementing Domain Fronting in an assessment.

domain-profiler

Given a domain, will tell you the decisions that the domain owner has made.

domained

Multi Tool Subdomain Enumeration

domainfrontinglists

A list of Domain Frontable Domains by CDN

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

domlink

A tool to link a domain with registered organisation names and emails, to other domains.

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer

droopescan

A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.

drupwn

Drupal enumeration & exploitation tool

dufflebag

Search exposed EBS volumes for secrets

dump

Stuff that doesn't deserves its own repository.

dumpert

LSASS memory dumper using direct system calls and API unhooking.

dvca

Damn Vulnerable Cloud Application