axiom215 Goto Github PK

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-tools

Custom pentesting tools

pers

A passive scanning tool for finding expired domain vulnerabilities while you browse.

phishing_catcher

Phishing catcher using Certstream

physical-web

The Physical Web: walk up and use anything

piknik

Copy/paste anything over the network

policies

Collection of information security policies.

portplow

PortPlow is a distributed port and system scanning & enumeration service. It enables the quick and automated enumeration of ports and services from multiple systems managed by a central console.

pretend

A tool for changing your identity in Linux. (uid/gid/sgids)

proof-of-concepts

A little collection of fun and creative proof of concepts to demonstrate the potential impact of a security vulnerability.

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

pwnauth

python

python-fire

Python Fire is a library for automatically generating command line interfaces (CLIs) from absolutely any Python object.

python-html-gallery

Python program for creating static HTML image galleries

re-for-beginners

"Reverse Engineering for Beginners" free book

reposcanner

Python script to scan Git repos for interesting strings

revsh

A reverse shell with terminal support, data tunneling, and advanced pivoting capabilities.

saddam

DDoS Amplification Tool

santa

A binary whitelisting/blacklisting system for macOS

seal

This is a Slack bot that publishes a team's pull requests to their Slack Channel, once provided the organisation name, the team members' github names, and a list of repos to follow. It is my first 20% project at GDS.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

second-order

Second-order subdomain takeover scanner

security_list

Great security list for fun and profit

security_ninjas_appsec_training

OpenDNS application security training program

securitybot

Distributed alerting for the masses!

shard

A command line tool to detect shared passwords

shodan-scripts

Collection of Scripts for shodan searching stuff.

simple-enum

Making subdomain enumeration great again... or just automating it. Whatever you prefer.

singularity

A DNS rebinding attack framework.