a1k-ghaz1 Goto Github PK

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

cloakquest3r-find-origin-ip-

Uncover the true IP address of websites safeguarded by Cloudflare & Others

cloudbunny-find-origin-ip-behind-waf

CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.

cloudflair

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

cloudflare-origin-ip

Try to find the origin IP of a webapp protected by Cloudflare.

cloudflarebypassforscraping

A cloudflare verification bypass script for webscraping

cloudflare_enum

Cloudflare DNS Enumeration Tool for Pentesters

cloudpeler

CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websites that have been protected by CloudFlare. The resulting information is certainly very useful for conducting further penetration testing, and analyzing websites with the same server.

cmseek

CMS (Content Management Systems) Detection and Exploitation suite

cmsfuzz

cmsmap

cmspoc---cms-cve-sqli-xss-lfi-rfi-rce

CMS渗透测试框架-A CMS Exploit Framework

collector-find-parameters-

Collect XSS vulnerable parameters from entire domain.

command-injection-payload-list

🎯 Command Injection Payload List

commix

Automated All-in-One OS command injection and exploitation tool.

cook

A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.

cookingxss

XSS Cookie Stealer | PROOF OF CONCEPT

corsexploit

corso-hacking-etico-2024

crawl

crypt

ctf

CTF (Capture The Flag) writeups, code snippets, notes, scripts

ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

cumulus-message-adapter

A command-line interface for preparing and outputting Cumulus Messages for Cumulus Tasks

cve-2022-24181

XSS via Host Header injection and Steal Password Reset Token of another user

cve-2023-22527-confluence

[Confluence] CVE-2023-22527 realworld poc

cve-2024-21887

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.

cve-2024-32640-sqli-muracms

CVE-2024-32640 | Automated SQLi Exploitation PoC

cve-maker

Tool to find CVEs and Exploits.

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis