dinosn Goto Github PK

nimcrypt2

.NET, PE, & Raw Shellcode Packer/Loader Written in Nim

nodebb-plugin-sso-oauth

NodeBB Plugin that allows users to login/register via any configured OAuth provider.

oauthscan

Burp Suite Extension useful to verify OAUTHv2 and OpenID security

offensive-c-sharp

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration-testing-tools

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

penetration_testing_poc-1

pentest

:no_entry: offsec batteries included

pentest-tools

pentesting-notes

Pentesting notes

php-binary-bugs

PHP binary bugs advisory

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

poc-1

PoC collection of Atlassian(Jira, Confluence, Bitbucket) products and Jenkins, Solr, Nexus

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

proxy-attackchain

proxylogon, proxyshell, proxyoracle and proxytoken full chain exploit tool

proxyshell

A basic proxylogon scanner

psychson

Phison 2251-03 (2303) Custom Firmware & Existing Firmware Patches (BadUSB)

rce-0-day-for-ghostscript-9.50

RCE 0-day for GhostScript 9.50 - Payload generator

re-ios-apps

A completely free, open source and online course about Reverse Engineering iOS Applications.

red-teaming-toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

redis-rogue-server

Redis(<=5.0.5) RCE

redis_get

Get redis keys from open redis, or by using a password. This is to create a proof of concept to be used later in reports.

richfaces

A collection of exploits created or modified by me

rsacrack

A toolbox for extracting RSA private keys from public keys.

rsactftool

RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data

sap

Collection of SAP resources for penetration testing

securitytips

seeyoucm-thief

serializedpayloadgenerator