luied Goto Github PK

amass

In-depth Attack Surface Mapping and Asset Discovery

assetfinder

Find domains and subdomains related to a given domain

blackeye

The ultimate phishing tool with 38 websites available!

capturando-senha-chrome-com-arduino

cloudflair

🔎 Find origin servers of websites behind by CloudFlare using Internet-wide scan data from Censys.

codeflix

Exercícios do curso de Laravel 5.4 + Ionic 3 da CodeEducation

ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

domxssscanner

DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities

easysploit

EasySploit - Metasploit automation (EASIER and FASTER than EVER)

first-one---python

PYTHON

gmapsapiscanner

h1-easy

Easy command-line interface to manage hackerone

hash-buster

Crack hashes in seconds.

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jsshell

An interactive multi-user web JS shell

linux-exploit-suggester

Linux privilege escalation auditing tool

meltdown

This repository contains several applications, demonstrating the Meltdown bug.

mona

Corelan Repository for mona.py

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

phantom-evasion

Python AV evasion tool capable to generate FUD executable even with the most common 32 bit metasploit payload(exe/elf/dmg/apk)

reflector

Burp plugin able to find reflected XSS on page in real-time while browsing on site

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

server-2012---rce

server2012-Group-policy-RCE

subdomain_takeover

Subdomain Takeover

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

sublist3r

Fast subdomains enumeration tool for penetration testers

wfuzz

Web application fuzzer

wpxmlrpcbrute

Brute force WordPress sites vulnerabile to XML-RPC amplification.

xpt

XPT - XSS Polyglot Tester