0x13337 Goto Github PK

garfield

An offensive attack framework for Distributed Layer of Modern Applications

gfpgan

GFPGAN aims at developing Practical Algorithms for Real-world Face Restoration.

git-secrets

Prevents you from committing secrets and credentials into git repositories

gitminer

Tool for advanced mining for content on Github

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

gophish

Open-Source Phishing Toolkit

grafana-ssrf

Authenticated SSRF in Grafana

ground-control

A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

gtfobins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

gwt-penetration-testing-toolset

A set of tools made to assist in penetration testing GWT applications. Additional details about these tools can be found on my OWASP Appsec DC slides available here: http://www.owasp.org/images/7/77/Attacking_Google_Web_Toolkit.ppt

h5sc

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

hackazon

A modern vulnerable web app

hacker-container

Container with all the list of useful tools/commands while hacking Kubernetes Clusters

hacker101

Hacker101

hackvault

A container repository for my defensive/offensive hacks!

hadoop-attack-library

A collection of pentest tools and resources targeting Hadoop environments

hexcalc

hollows_hunter

A process scanner detecting and dumping hollowed PE modules.

honggfuzz

Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)

house-of-corrosion

A description of the "House of Corrosion" GLIBC heap exploitation technique.

how2heap

A repository for learning various heap exploitation techniques.

http-desync-guardian

Analyze HTTP requests to minimize risks of HTTP Desync attacks (precursor for HTTP request smuggling/splitting).

httpie

As easy as httpie /aitch-tee-tee-pie/ 🥧 Modern command line HTTP client – user-friendly curl alternative with intuitive UI, JSON support, syntax highlighting, wget-like downloads, extensions, etc. https://twitter.com/clihttp

httprebind

Automatic tool for DNS rebinding-based SSRF attacks

hunt

idapython

A collection of IDAPython modules made with 💚 by Duo Labs

impacket

Impacket is a collection of Python classes for working with network protocols.

infoga

Infoga - Email Information Gathering

infosec_reference

Information Security Reference That Doesn't Suck

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.