lalkaltest Goto Github PK

http-spoofed.burpcollaborator.net-22-

http2smugl

httpscreenshot

if-now-sysdate-sleep-12-0-xor-if-now-sysdate-sleep-12-0-or-xor-if-now-sysdate-sleep-12-0-or-

img.github.io

imgrce

Image Tragick Exploit Tool Using Burp Collaborator

j6okw-330-516-e9ytv

jndi-exploit-kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

jsfscan.sh

Automation for javascript recon in bug bounty.

jsscanner

You can read the writeup on this script here

katana

A next-generation crawling and spidering framework.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

kxss

This a adaption of tomnomnom's kxss tool with a different output format

leaky-paths

A collection of special paths linked to major web CVEs, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

learn365

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

liffy

Local file inclusion exploitation tool

linux-default-files-images-location

Default Linux files/images location

log4j-payload-generator

Log4j jndi injects the Payload generator

loggerplusplus-api-filters

A Collection of Logger++ Filters for Hunting API Vulnerabilities

logmepwn

A fully automated, reliable, super-fast, mass scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.

lorsrf

for find hidden parameters that can be used to find SSRF or Out-of-band resource load

match-replace-burp

Useful Match and Replace BurpSuite Rules

meg

Fetch many paths for many hosts - without killing the hosts

metabigor

Intelligence tool but without API key

nslookup--q-cname-6mt7c0vzt47ecyypndcs2v5odfj6fu7tvmyapxfl4.burpcollaborator.net.-

nstmrt

ohmybackup

Scan Victim Backup Directories & Backup Files

open_redirects_list

-

p35bh-302-377-hxe35