haxormad Goto Github PK

evilgophish

evilginx2 + gophish

fakemeeting

Creates and sends fake meeting invite

federalist-docs

Documentation for the Federalist platform

filechangemonitor

Continuous monitoring for JavaScript files

finalrecon

The Last Web Recon Tool You'll Need

flask-shell2http

A minimalist REST API wrapper for python's subprocess API. Map shell commands to flask's endpoints and query asynchronously.

fuxploider

File upload vulnerability scanner and exploitation tool.

graphcrawler

GraphQL automated security testing toolkit

gtfobins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

hack_tools_for_me

自己为了方便收集的小工具

haptyc

haxormad

Config files for my GitHub profile.

howtohunt

Some Tutorials and Things to Do while Hunting That Vulnerability.

http-smuggling-calculator

Perform TE.CL HTTP Request Smuggling attacks by crafting HTTP Request automatically.

injuredandroid

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

inputscanner

insecureprogrammingdb

Insecure programming functions database

inventory

Asset inventory on public bug bounty programs.

invoke-atomicredteam

Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red-team/tree/master/atomics) of Red Canary's Atomic Red Team project.

jira_testing

jsmon

a javascript change monitoring tool for bugbounties

jsscanner

You can readup the writeup on this script here

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

keywords

killer

Is a tool created to evade AVs and EDRs or security tools.

kubernetes-goat

Kubernetes Goat is "Vulnerable by Design" Kubernetes Cluster. Designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security.

livetargetsfinder

Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts and gather service information

log-4-jam

Log4j JNDI inj. vuln scanner

log4j-payload-generator

Log4j jndi injects the Payload generator

log4jscanner

log4jScanner provides the ability to scan internal subnets for vulnerable log4j web services