x-a-n-d-e-r-k Goto Github PK

api-server

JSON API for Lair

atat-web-ui

ATAT Web UI. A single-page application.

attacksurfacemapper

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

aws_public_ips

Fetch all public IP addresses tied to your AWS account. Works with IPv4/IPv6, Classic/VPC networking, and across all AWS services

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

browser-scripts

Collection of small JavaScript functions and scripts that can be used in the browser to interact with Lair

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugbountyguide

Bug Bounty Guide is a launchpad for bug bounty programs and bug bounty hunters.

contracts

A small collection of potentially useful contract templates

ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

discover

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.

docker

Docker builds for warhorse

docker-lair-app

drone-nessus

Parses a nessus XML file into a lair project

drone-nmap

Parses an NMap XML file into a lair project

drone-ssl-hosts

Drone for importing hostnames based on SSL/TLS certificate information into Lair.

drone-whois

Import netblocks from whois data

follina

fuzzy

Adaptation of FuzzDB by fuzzdb-project

go365

An Office365 User Attack Tool

gobuster

Directory/File, DNS and VHost busting tool written in Go

http-vuln-cve2020-3452.nse

CVE-2020-3452 : Cisco ASA and FTD Unauthorized Remote File Reading Nmap NSE Script

identywaf

Blind WAF identification tool

kadimus

Kadimus is a tool to check sites to lfi vulnerability , and also exploit it...

keye

Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will make a request to these URLs and try to detect changes based on their response's body length.

lair

Lair is a reactive attack collaboration framework and web application built with meteor.

lair-docker

lair-docker-compose repo

minifyjsfile

mod0burpuploadscanner

HTTP file upload scanner for Burp Proxy

physical-docs

This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.