affilares Goto Github PK

cert-censh

Combine between Crt.sh and Censys.io to gather ipv4 / subdomain (s) / website (s)

cf-check

Check an IP is Owned by Cloudflare

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

cheatsheets

Helped during my OSCP lab days.

check-list-

Check List

checklists

Red Teaming & Pentesting checklists for various engagements

cisco-rce

CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC

clairvoyance

Obtain GraphQL API schema despite disabled introspection!

class-dump-binaries

class-dump binaries for Objc and Swift apps

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

cloud-pentesting

This repository is in progress, it will keep updating as I come across to new learning materials. Feel free to contribute.

cloud-service-enum

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

cloudbunny

CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.

cloudcheck

Checks using a test string if a Cloudflare DNS bypass is possible using CloudFail.

cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

cloudflair

🔎 Find origin servers of websites behind by CloudFlare using Internet-wide scan data from Censys.

cloudfrunt

A tool for identifying misconfigured CloudFront domains

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cloudscraper

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

code-review-checklist

This code review checklist helps you be a more effective and efficient code reviewer.

codeallthethings

A list of of threat sinks used in the manual security source code review for application security

collabfiltrator

Exfiltrate blind remote code execution output over DNS via Burp Collaborator.

collabozark

CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE, External Resource Access payloads triggers.

command-injection-payload-list

🎯 Command Injection Payload List

command-mobile-penetration-testing-cheatsheet

Mobile penetration testing android command cheatsheet

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

community

Kubernetes community content

confused

Tool to check for dependency confusion vulnerabilities in multiple package management systems

container-security-checklist

Checklist for container security - devsecops practices