srand2 Goto Github PK

shellcode-cleaner

Sick of cleaning shellcode up for exploits/payloads? Me too.

shortnameguesser

A tool to guess the rest of the shortnames provided by vulnerable IIS instances.

sleuthql

Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.

smbclient-ng

smbclient-ng, a fast and user friendly way to interact with SMB shares.

sns

IIS shortname scanner written in Go

sourcemapper

Extract JavaScript source trees from Sourcemap files

sql-injection-payload-list

🎯 SQL Injection Payload List

sqli-ctf

A training CTF covering non-blind SQL injection techniques

sqlidetector

Simple python script that helps you to detect SQL injection "Error based" by sending multiple requests with different payloads and check for 152 regex pattern for different databases.

sqlmap-aes-encrypt-payload

sqlmap AES encrypt payload

sqlrecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

sql_course_data

srand2.github.io

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

sstimap

Automatic SSTI detection tool with interactive interface

sub-scout

svg-cheatsheet

A cheatsheet for exploiting server-side SVG processors.

teamfiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

template-injection-workshop

Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.

testr

TESTR - Vulnerable Python Web-App to practice XSS and Command Injection

tiscripts

Turbo Intruder Scripts

token-priv

Token Privilege Research

token-reverser

Words list generator to crack security tokens

tokenuniverse

An advanced tool for working with access tokens and Windows security policy.

toolbox-pentest-web

Docker toolbox for pentest of web based application.

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

traversty

Directory traversal tool

treehouse-wordlists

Wordlist for Hacking, Penetration Testing, Vulnerability Assessments and More

trevorspray

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

trickest-wordlists

Real-world infosec wordlists, updated regularly