chouaibhm Goto Github PK

burpsuite

burpsuite-secret_finder

Burp Suite extension to discover apikeys/accesstokens and sensitive data from HTTP response.

burpsuite_403bypasser

Burpsuite Extension to bypass 403 restricted directory

byob

An open-source post-exploitation framework for students, researchers and developers.

bypass-403

A simple script just made for self use for bypassing 403

bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

bypass-json-web-token-jwt-

Break and Elevation of Privilege the API v2 using JSON Web Token (JWT)

bypass-php-gd-process-to-rce

Reference: http://www.secgeek.net/bookfresh-vulnerability/

cafecompare

Java code comparison tool (jar / class)

cameradar

Cameradar hacks its way into RTSP videosurveillance cameras

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

carboncopy

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

cdogscan

多服务口令爆破、内网常见服务未授权访问探测，端口扫描

certasset

Takes ip range, Scan all open SSL Certs, Grab Cnames

chaos

:fire: CHAOS allow generate payloads and control remote Windows systems.

cheat-scripts

because you cant remember everything

cheatsheet-god

Penetration Testing Biggest Reference Bank - OSCP / PTP & PTX Cheatsheet

chimay-red

POC of Mikrotik exploit from Vault 7 CIA Leaks

cintruder

Captcha Intruder (CIntruder) is an automatic pentesting tool to bypass captchas.

cisco-snmp-rce

Cisco IOS SNMP RCE PoC

citadel

Collection of pentesting scripts

cloudflare_enum

Cloudflare DNS Enumeration Tool for Pentesters

cms-hunter

CMS漏洞测试用例集合

codeql-uboot

commands-for-sec

Useful commands for infosec

commonspeak2

Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

commonspeak2-wordlists

Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.

compsecattacklabs

Contains Attack labs

cors-poc

cracke-dit

cracke-dit ("Cracked It") makes it easier to perform regular password audits against Active Directory environments.