dojosecurity Goto Github PK

api_wordlist

A wordlist of API names for web application assessments

bbtips

BugBountyTips

blacklist3r

project-blacklist3r

blind-ssrf-chains

An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

bmc-control-m-unauthenticated-sql-injection

BMC Control-M Unauthenticated SQL Injection

cheat-sheet---active-directory

This cheat sheet contains common enumeration and attack methods for Windows Active Directory with the use of powershell.

ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

commix

Automated All-in-One OS Command Injection Exploitation Tool.

crimson

Reconstruction and automation of the reconnaissance phase.

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

enterprise-architect-sql-injection

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

graphql-playground

🎮 GraphQL IDE for better development workflows (GraphQL Subscriptions, interactive docs & collaboration)

hackvault

A container repository for my public web hacks!

hopla

HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite

hosthunter

HostHunter a recon tool for discovering hostnames using OSINT techniques.

htbm

invisi-shell

Hide your Powershell script in plain sight. Bypass all Powershell security features

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

kioptrix-walkthrough

Writeups on Kioptrix machines.

kiterunner

Contextual Content Discovery Tool

lfisuite

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

oralyzer

Open Redirection Analyzer

oscp-cheatsheet

powerglot

Powerglot encodes offensive powershell scripts using polyglots . Offensive security tool useful for stego-malware, privilege escalation, lateral movement, reverse shell, etc.

powersharppack

privesccheck

Privilege Escalation Enumeration Script for Windows

richsploit

Exploitation toolkit for RichFaces

spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.