ltidi2000 Goto Github PK

aem-hacker

authz0

🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URL and Role.

awesome-waf

🔥 Everything about web-application firewalls (WAF).

awesome-web3-security

A curated list of web3Security materials and resources For Pentesters and Bug Hunters.

awscognitokiller

AWS Cognito Misconiguration Automation Check

bitbucketkiller

Enum, Check Vuln, Exploit BitBucket

blackboxprotobuf-adv

Blackbox protobuf is a library for decoding and modifying arbitrary protobuf messages without the protobuf type definition.

blind-xss-svg

Blind XSS SVG

brutespray

Brute-Forcing from Nmap output - Automatically attempts default creds on found services.

challenges

chaos-client

Go client to communicate with Chaos DNS API.

codeql

《深入理解CodeQL》Finding vulnerabilities with CodeQL.

codeql-uboot

codeqlauto

codeqlresearch

cve-2020-2551

cve-2021-26084

cve-2021-45232

cve-2022-29464

WSO2 RCE (CVE-2022-29464) exploit.

cve-2022-36804

A real exploit for BitBucket RCE CVE-2022-36804

cve-2023-23415

CVE-2023-23415

cve-2023-28231

DHCP Server Remote Code Execution impact: 2008 R2 SP1 до Server 2019

exploits

extractor-java

CodeQL extractor for java, which don't need to compile java source

firebase-android-sdk

Firebase Android SDK

flutter_qr_mobile_vision

QR reader plugin using mobile vision API for Flutter.

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

grawler

Grawler is a tool written in PHP which comes with a web interface that automates the task of using google dorks, scrapes the results, and stores them in a file.

hackjava

《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

hakoriginfinder

Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!