hax0rg1rl Goto Github PK

java-sec-code

Java web common vulnerabilities and security code that are base on SpringBoot and SpringSecurity.

javadeserh2hc

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

jdwp-shellifier

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jiraffe

One stop place for exploiting Jira instances in your proximity

jndi-exploit-kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

js-code-to-svg-flowchart

js2flowchart - a visualization library to convert any JavaScript code into beautiful SVG flowchart. Learn other’s code. Design your code. Refactor code. Document code. Explain code.

js2pdfinjector

Inject a JS file into a PDF file.

jsparser

jspathextractor

Jspathextractor is an Burp Suite extension that extract hidden paths from js files and beatify it for futher reading.

jsshell

An interactive multi-user web JS shell

judasdns

Nameserver DNS poisoning attacks made easy

juice-shop

OWASP Juice Shop is an intentionally insecure webapp for security trainings written entirely in Javascript which encompasses the entire OWASP Top Ten and other severe security flaws.

jwt-cracker

Simple HS256 JWT token brute force cracker

jwtcrack

keye

Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will make a request to these URLs and try to detect changes based on their response's body length.

keyfinder

Keyfinder🔑 is a tool that let you find keys while surfing the web!

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

knock

Knock Subdomain Scan

knr-xss-payloads

Payloads For XSS

koadic

Koadic C3 COM Command & Control - JScript RAT

kubeaudit

kubeaudit helps you audit your Kubernetes clusters against common security controls

kunlun-m

KunLun-M是一个完全开源的静态白盒扫描工具，支持PHP、JavaScript的语义扫描，基础安全、组件安全扫描，Chrome Ext\Solidity的基础扫描。

l4sh

Log4Shell RCE Exploit - fully independent exploit does not require any 3rd party binaries.

lazys3

leakgan

The codes of paper "Long Text Generation via Adversarial Training with Leaked Information" on AAAI 2018. Text generation using GAN and Hierarchical Reinforcement Learning.

learning-go

Source code repository for my book "Learning Go Programming"

lightbulb-framework

Tools for auditing WAFS

linkedin2username

OSINT Tool: Generate username lists for companies on LinkedIn

linkfinder

A python script that finds endpoints in JavaScript files