sec99 Goto Github PK

saml-tracer

Browser extension for examining SAML messages

sap_recon

PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)

scoutsuite

Multi-Cloud Security Auditing Tool

scripthunter

Tool to find JavaScript files on Websites

scrying

A tool for collecting RDP, web and VNC screenshots all in one place

sd-goo

secret-bridge

Monitors Github for leaked secrets

secretfinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

secretscanner

Find secrets and passwords in container images and file systems

seltzer

A Burp Suite extension for headless, unattended scanning.

server-status_pwn

A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-status instances.

sharkjack-payloads

The Official Hak5 Shark Jack Payload Repository

shhgit

Ah shhgit! Find GitHub secrets in real time

shosubgo

Small tool to Grab subdomains using Shodan api.

shuffledns

shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.

singularity

A DNS rebinding attack framework.

smbghost_rce_poc

smbmap

SMBMap is a handy SMB enumeration tool

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

sns

IIS shortname scanner written in Go

solr-ssrf

Apache Solr SSRF(CVE-2021-27905)

spartan

My Recon Automation

spray365

Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in execution plan features options that attempt to bypass Azure Smart Lockout and insecure conditional access policies.

spring-boot-actuator-exploit

Spring Boot Actuator (jolokia) XXE/RCE

spring-boot-vulnerability

ssrf-sheriff

A simple SSRF-testing sheriff written in Go

ssrfire

An automated SSRF finder. Just give the domain name and your server and chill! ;)

ssrfmap

Automatic SSRF fuzzer and exploitation tool

static-bins

Static binaries for Windows, Linux and Mac useful in Red Teaming and Penetration Testing

sub-drill

A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements.