hax0rg1rl Goto Github PK

0d1n

Web security tool to make fuzzing at HTTP, Beta

2fassassin

Bypass Two-Factor-Authentication

abuse-ssl-bypass-waf

Bypassing WAF by abusing SSL/TLS Ciphers

acme.sh

A pure Unix shell script implementing ACME client protocol

actuator-testbed

A vulnerable application exposing Spring Boot Actuators

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

aemscan

Adobe Experience Manager Vulnerability Scanner

afl_gcj_fuzzing_simple

A simple test of fuzzing Java with AFL and GCJ

al-khaser

Public malware techniques used in the wild

albatar

Albatar is a SQLi exploitation framework in Python

allthingsssrf

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

anaranjado

Anaranjado is a scraping tool that identifies URLs within JavaScript files.

angularjs-csti-scanner

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.

apache-log4j-poc

Apache Log4j 远程代码执行

api-netcraft.com

(Unofficial) Python API for http://netcraft.com

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

api_wordlist

A wordlist of API names for web application assessments

aquatone

A Tool for Domain Flyovers

arjun

Arjun is a python script for finding hidden GET & POST parameters.

attacking-drupal

Scripts used to augment the penetration testing process of Drupal web applications.

automatic-api-attack-tool

Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an output.

autorecon

Simple shell script for automated domain recognition with some tools

autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

autosint

Tool to automate common osint tasks

awae-preparation

This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesome-chatgpt-prompts

This repo includes ChatGPT promt curation to use ChatGPT better.

awesome-cloud-pentest

awesome-code-review

An "Awesome" list of code review resources - articles, papers, tools, etc