dev2x0 Goto Github PK

4n4ldetector

Advanced static analysis tool

app-csrfshark

🚀 CSRFShark - a utility for manipulating cross-site request forgery attacks

arjun

HTTP parameter discovery suite.

artemis

A modular web reconnaissance tool and vulnerability scanner.

awesome-anti-forensic

Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.

awesome-intelligence

A collaboratively curated list of awesome Open-Source Intelligence (OSINT) Resources

bug-bounty-scripts

The scripts I write to help me on my bug bounty hunting

burpbounty

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

bypassneo-regeorg

免杀版Neo-reGeorg

checklists

Red Teaming & Pentesting checklists for various engagements

cookedgrabber

Discord, Twitter, Instagram, Netflix cookies, token grabber and also password grabber. Grabbing from all web browsers !

crackmapexec

A swiss army knife for pentesting networks

cve-2022-25765-pdfkit-exploit-reverse-shell

pdfkit <0.8.6 command injection shell. The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. (Tested on ver 0.8.6) - CVE-2022-25765

cve-2023-1454-jeecg-boot-qurestsql-sqlvuln

jmreport/qurestSql 未授权SQL注入批量扫描poc Jeecg-Boot是一款基于Spring Boot和Jeecg-Boot-Plus的快速开发平台，最新的jeecg-boot 3.5.0 中被爆出多个SQL注入漏洞。

cve-2023-23333

SolarView Compact through 6.00 downloader.php commands injection (RCE) nuclei-templates

cve-2023-27372

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.

cve-2023-27997-check

Safely detect whether a FortiGate SSL VPN instance is vulnerable to CVE-2023-27997 based on response timing

cve-2023-34598

Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) vulnerability where it's possible to include the content of several files present in the installation folder in the server's response.

cve-2023-34599

Multiple Cross-Site Scripting (XSS) vulnerabilities have been identified in Gibbon v25.0.0, which enable attackers to execute arbitrary Javascript code.

cve-2023-34835

Cross Site Scriptin

cve-2023-34839

cve-2023-34840

XSS in angular-ui-notification

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

cybersecurity_conferences

List of some cybersecurity conferences

daprofiler

DaProfiler is an OSINT tool allowing you to collect certain information about yourself in order to rectify by rgpd requests the traces you may have left on the net. DaProfiler is indeed able to recover: Addresses, Social media accounts, e-mail addresses, mobile / landline number, jobs. On a specified subject in a limited time. DaProfiler is designe

dev

dns-analyzer

A Burp Suite extension for finding DNS vulnerabilities in web applications!

dnsmorph

Domain name permutation engine written in Go

dnspy

Find subdomains and takeovers.

dogerat

A multifunctional Telegram based Android RAT without port forwarding.