andripwn Goto Github PK

amazon-validator

Amazon Email Checker (Update 19/12/20)

apple-validator

Apple Validator Email Checkers - PHP Versions

bashvulnerablelimiting

no rate limit attack using bash

bounty

Misc bounty and vulndisc things

cache-poisoning

Web cache poisoning attack

code-recursion

cors-bypass112119

Cross Origin Resource Sharing Misconfiguration Bypassing Payloads

crawler-python

email scraper/crawls using python (Google/Bing)

csrf-generator-payloads

CSRF Generator Payloads

cve-2018-18852

CERIO RCE CVE-2018-18852, authenticated (vendor defaults) web-based RCE as root user.

cve-2019-0708

Scanner PoC for CVE-2019-0708 RDP RCE vuln

cve-2019-19781

Citrix ADC scanner (CVE-2019-19781) using hosts retrieved from Shodan API.

cve-2020-11107

XAMPP - CVE-2020-11107

dellsupportassist-rce-poc

dino-exploitjs

Hacking the Chrome Dino Game chrome://dino/

django_cve201919844

PoC for CVE-2019-19844 ( https://www.djangoproject.com/weblog/2019/dec/18/security-releases/ )

duckoverflow

fivem-anticheat-fixed

FiveM AntiCheat

frida-fuzz

This experimetal fuzzer is meant to be used for API in-memory fuzzing.

h1-notify

Get newest public disclosed HackerOne report notifications on your Desktop https://hackerone.com/hacktivity

instake

Instagram Auto Downloader (photos, videos, profile picture)

jsonp

jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints. This could help reveal cross-site script inclusion vulnerabilities or aid in bypassing content security policies.

kubolt

Kubolt utility for scanning public kubernetes clusters

labs1

Pwned 0Day Security

mini-shell

A Simple PHP Based Mini Web-Shell for command execution, directory browsing etc.

mirc-cve-2019-6453

Proof of calc for CVE-2019-6453

oh-my-zsh

🙃 A delightful community-driven (with 1,300+ contributors) framework for managing your zsh configuration. Includes 200+ optional plugins (rails, git, OSX, hub, capistrano, brew, ant, php, python, etc), over 140 themes to spice up your morning, and an auto-update tool so that makes it easy to keep up with the latest updates from the community.

payloadsall

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pulse-exploit

Pulse Secure SSL VPN exploit (CVE-2019-11510) using hosts retrieved from Shodan API.

pwn-vbulletin

Identify vulnerable (RCE) vBulletin 5.0.0 - 5.5.4 instances using Shodan (CVE-2019-16759)