h4ckologic Goto Github PK

cve-2019-17221

PhantomJS uses internal module: webpage, to open, close, render, and perform multiple actions on webpages, which suffers from an arbitrary file read vulnerability. The vulnerability exists in the page.open() function of the webpage module, which loads the specified URL and calls a given callback. When opening a HTML file, an attacker can supply specially crafted file content, which allows reading arbitrary files on the filesystem. The vulnerability is demonstrated by using page.render() as the function callback, resulting in the generation of a PDF or an image of the targeted file.

go-scan

A simple bash script to perform recon using go-based tools.

gobuster

Directory/file & DNS busting tool written in Go

recon

Perform recon on domains using certificate transparency.

recon-my-way

This repository created for personal use and added tools from my latest blog post.

reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

stock

talks

Quick and handy collection of my conference Slides

tbhm

The Bug Hunters Methodology

zarp

Network Attack Tool