gotr00t0day Goto Github PK

auto-recon

Information-Gathering Shell Script

b1n4ryr3v3rs3

cve-2022-1388

A remote code execution vulnerability exists in the iControl REST API feature of F5's BIG-IP product. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands with root privileges.

cve-2024-4040

A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform remote code execution on the server.

cve-2024-4577

Argument injection vulnerability in PHP

deepweb

DeepWeb is a tool that extracts links from a webpage and does a deep analysis on every link.

dirbhunt

A fast and simple directory brute forcer

domainator

Domainator is a tool that will find new assets for any organization.

dvr_sploit

Simple python3 script to automate CVE-2018-9995

f5-big-ip-scanner

F5 BIG-IP Scanner scans for servers on shodan and checks to see if they are vulnerable.

filedownload

Download files from the internet with proxy support.

findexploits

FindExploits is an automation script that uses windows exploit suggester in conjuction with searchsploit to find local priv escalation exploits.

forbiddenpass

gdorksearch

github-profile-readme-generator

🚀 Generate GitHub profile README easily with the latest add-ons like visitors count, GitHub stats, etc using minimal UI.

gotasn

Extract the IP range associated with a given ASN (Autonomous System Number) and subsequently utilize the Masscan tool to identify open HTTP ports within that range.

gotr00t0day

gotr00t0day.github.io

gotr00tbot

discord.py bot

gsec

Web Security Scanner

hostheaderinjection

igf

Informatrion Gathering Framework

ipgeolocation

ivanti_poc

Authentication bypass in Ivanti Endpoint Manager Mobile

linkfinder

A python script that finds endpoints in JavaScript files

localipbug

In some cases the Miscorosoft HTTP Server API leaks internal ip addresses while sending a GET / HTTP/1.0 request to the server.

nextgen-mirth-connect-exploit

A vulnerability exists within Mirth Connect due to its mishandling of deserialized data. This vulnerability can be leveraged by an attacker using a crafted HTTP request to execute OS commands within the context of the target application.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

obscurepy

A tool for obscuring, or making python source difficult to read.

oswalkpy

file names and directory tree