heckintosh Goto Github PK

anatomy-of-webpack

android-security-teryaagh

Android security guides, roadmap, docs, courses, write-ups, and teryaagh.

auraintruder

baseplate.go

Reddit's Service Framework in Go

cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

cstc

CSTC is a Burp Suite extension that allows request/response modification using a GUI analogous to CyberChef

ctf

Challenges/ sometimes there is a write up in there else its on my blog

cve-2020-5398

💣 CVE-2020-5398 - RFD(Reflected File Download) Attack for Spring MVC

cve-2021-44228-apache-log4j-rce

Apache Log4j 远程代码执行

cve-2021-44228-poc-log4j-bypass-words

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - A trick to bypass words blocking patches

cve-2023-25690-poc

CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.

cve-2023-2825

GitLab CVE-2023-2825 PoC. This PoC leverages a path traversal vulnerability to retrieve the /etc/passwd file from a system running GitLab 16.0.0.

dirsearch

Web path scanner

dnsdmpstr

Unofficial API & Client for dnsdumpster.com and hackertarget.com

dnspy-unity-mono

Fork of Unity mono that's used to compile mono.dll with debugging support enabled

dnsrecon

DNS Enumeration Script

dvws

endgame

Salesforce's AWS pentest tool which went 404 https://news.ycombinator.com/item?id=26154038

ffuf

fireflow

A simple DDOS detection tool

fparam

frida_setup

One-click installer for Frida and Burp certs for SSL Pinning bypass

fuzzing

github-dorks

Find leaked secrets via github search

github-recon

GitHub Recon — and what you can achieve with it!

gospider

Gospider - Fast web spider written in Go

heckintosh.github.io

Blog.

hugo-blog-awesome

Fast, minimal blog with dark mode support.

interactsh

An OOB interaction gathering server and client library

jndi-injection-exploit-plus

50+ Gadgets(20 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.