gub0x1 Goto Github PK

pentest-tools

Custom pentesting tools

pocs

Proof of Concepts for CVE-2016–3714

powercat

netshell features all in version 2 powershell

powerops

PowerShell Runspace Portable Post Exploitation Tool aimed at making Penetration Testing with PowerShell "easier"

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

psattack

A portable console aimed at making pentesting with PowerShell a little easier.

qark

Tool to look for several security related Android application vulnerabilities

recon.sh

A toolset to track and organize output of reconnaissance tools

relative-url-extractor

A small tool that extracts relative URLs from a file.

robotsdisallowed

A harvest of the Disallowed directories from the robots.txt files of the world's top websites.

s3-buckets-finder

Find aws s3 buckets and extract datas.

scantastic-tool

It's bloody scantastic

secgen

Create randomly insecure VMs

second-order

Second-order subdomain takeover scanner

secretfinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

secure-ios-app-dev

Collection of the most common vulnerabilities found in iOS applications

serpico

SimplE RePort wrIting and COllaboration tool

serverless_toolkit

A collection of useful Serverless functions I use when pentesting

sherlock

software-vulnerability-scanner

Vulnerability scanner based on vulners.com search API

some

Tool to make identifying SOME vulnerabilities easier.

sslpythontest

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

ssrfmap

Automatic SSRF fuzzer and exploitation tool

sub6

Web App Scanner

swf_json_csrf

teh_s3_bucketeers

the-art-of-subdomain-enumeration

This repository contains all the supplement material for the book "The art of sub-domain enumeration"

thefuck

Magnificent app which corrects your previous console command.

trufflehog

Searches through git repositories for high entropy strings, digging deep into commit history