xbforce Goto Github PK

add2burp

Send a list of URLs to burpsuite tool.

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

android-examples

APK's used as example Apps for decompiling

android-vulnerabilities

Covers Top 10 OWASP Mobile Vulnerabilities

autorecon

blog

This is my blog page, and I share my Write-Ups, videos, articles, and codes here.

bloodhound

Six Degrees of Domain Admin

checklists

Red Teaming & Pentesting checklists for various engagements

crt.sh

Gather subdomains from https://crt.sh

drozer

The Leading Security Assessment Framework for Android.

drozer-agent

The Android Agent for the Mercury Security Assessment Framework.

ejs-exploit

Remote Code Execution EJS Web Applications using express-fileupload

evil-twin

Learn how to set up a fake authentication web page on a fake WiFi network.

fglps

Yet another TCP Port Scanner, but lightning faster.

ghostpack-compiledbinaries

Compiled Binaries for Ghostpack (.NET v4.0)

httpx

httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

impacket

Impacket is a collection of Python classes for working with network protocols.

interactsh

An OOB interaction gathering server and client library

ipfinder

Find IP addresses of a list of domains.

knoxss-paylaod

kooxss

KooXSS checks for some special characters which are not sanitized. It simply speeds up the process of finding XSS.

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

moreutils

netcat

Netcat for windows 32/64 bit

owasp-testing-checklist

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

owasp-web-checklist

OWASP Web Application Security Testing Checklist

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

php-reverse-shell

PHP reverse shell script. Works on Linux OS, macOS, and Windows OS.

pivaa

Created by High-Tech Bridge, the Purposefully Insecure and Vulnerable Android Application (PIVAA) replaces outdated DIVA for benchmark of mobile vulnerability scanners.

powermad

PowerShell MachineAccountQuota and DNS exploit tools