darkoneiroi Goto Github PK

inql

InQL - A Burp Extension for GraphQL Security Testing

insecure-firebase-exploit

A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the app have set the security rules as true for both "read" & "write" an attacker can probably dump database and write his own data to firebase db.

invoke-wcmdump

PowerShell Script to Dump Windows Credentials from the Credential Manager

iprotate_burp_extension

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

iptable_evil

An evil bit backdoor for iptables

java-deserialization-scanner

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

javaserialkiller

Burp extension to perform Java Deserialization Attacks

jd-gui

A standalone Java Decompiler GUI

jenkins-attack-framework

jenkins-rce

:smiling_imp: Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jira-lens

Fast and customizable vulnerability scanner For JIRA written in Python

jira_scan

A simple remote scanner for Atlassian Jira

jolokia-exploitation-toolkit

jolokia-exploitation-toolkit

js-beautify

Beautifier for javascript

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

jsfscan.sh

Automation for javascript recon in bug bounty.

jshint

JSHint is a tool that helps to detect errors and potential problems in your JavaScript code

jshole

A JavaScript components vulnerability scanner, based on RetireJS

json-web-token-attacker

json-web-tokens

JWT Support for Burp

jsscanner

You can read the writeup on this script here

jsshell

JSshell - JavaScript reverse/remote shell

jwt-hack

🔩 jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)

jwt-heartbreaker

The Burp extension to check JWT (JSON Web Tokens) for using keys from known from public sources

jwt-lab

Lab for learning JWT.

jwt-pwn

Security Testing Scripts for JWT

jwtbrute

Brute forcing jwt tokens signed with HS256 since 2014

jwtcrack

Crack the shared secret of a HS256-signed JWT

jwtdemo

Practice hacking JWT tokens