yehgdotnet Goto Github PK

hashid

Software to identify the different types of hashes -

headless-examples

Examples to support the MDN resource covering Firefox headless mode — see https://developer.mozilla.org/en-US/Firefox/Headless_mode

heartbleed-poc

Test for SSL heartbeat vulnerability (CVE-2014-0160)

host-extract.rb

IP/Host Pattern Extractor

hostapd-wpe

Modified hostapd to facilitate AP impersonation attacks

hostapd-wpe-extended

Modification and tools for using hostapd for rogue AP attacks impersonating WPA-Enterprise networks to steal user credentials

http-request-smuggling

HTTP Request Smuggling Detection Tool

hyper

A terminal built on web technologies

idb

idb is a tool to simplify some common tasks for iOS pentesting and research

ie10-nopeeping

prevent password reveal button with CSS / JavaScript

iis_exploit

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.

inspathx

internal path discloser

inspeckage

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

inspy

A LinkedIn enumeration tool

internal-monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Mimikatz

invoke-obfuscation

PowerShell Obfuscator

invoke-thehash

PowerShell Pass The Hash Utils

ios-app-signer

This is an app for OS X that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.

ios-deploy

Install and debug iPhone apps from the command line, without using Xcode

ios-pentest-tools

Tools for iOS app testing

ios-surface-security-checker

A very light scanner that replaces some features of MobSF framework

ipainstaller

Install IPA from command line

itunes_backup2hashcat

Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat

jack

Drag and Drop ClickJacking PoC development assistance tool.

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

jbaah

jdwp-shellifier

jhijack

A Java Hijacking tool for web application session security assessment. A simple Java Fuzzer that can mainly be used for numeric session hijacking and parameter enumeration. Demonstration video is also available.

jmsdigger

JMSDigger is JMS API basedEnterprise Messaging Application assessment tool

jsbatchobfuscator

JSBatchobfuscator is a simple obfuscator for batch script