Name: Sébastien Copin
Type: User
Bio: Independent Cybersecurity Engineer
Location: France
Blog: https://www.cosades.com/
I am Sébastien Copin (cosad3s or cosades), cybersecurity freelancer & researcher - occasionally you will find here some of the tools or scripts I create or modify for hacking and bug bounty purposes 🏴☠️ 🛠️
💬 Do not hesitate to contact me through my personal website (form), Twitter or LinkedIn for anything.
apachetomcatscanner
A python script to scan for Apache Tomcat server vulnerabilities.
badpods
A collection of manifests that will create pods with elevated privileges.
badsecrets
A library for detecting known secrets across many web frameworks
cosad3s
cve-2022-35914-poc
defaultcreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
gql-generator
Generate queries from graphql schema, used for writing api test.
graphql-introspection-converter
Simple converter for GraphQL introspection JSON to schema
hacktricks-cloud
hfinder
Help recon of hostnames from specific ASN or CIDR, thanks to Robtex and BGP.HE
jappalyzer
A Java implementation of the Wappalyzer.
magtek-card-reader
Read Triple-track Magnetic Stripe Card from Magtek Swipe Card Reader
netscan
Network scanner
njsdump
Dump paths & pages from Next.js Manifest
postleaks
Search for sensitive data in Postman public library.
puncia
The Panthera(P.)uncia of Cybersecurity - Subdomain & Exploit Hunter powered by AI
related-domains
Find related domains of a given domain.
salsa
SALSA 💃⚡ - SALesforce Scanner for Aura (and beyond). Enumeration of vulnerabilities and misconfigurations against Salesforce endpoint.
seclists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
sessionless
SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens
sret
Salesforce Recon and Exploitation Toolkit
subscout
All-in-one subdomains scout tool Docker image
tapestry4-examples-docker
Working Apache Tapestry 4 examples on Apache Tomcat embedded in Docker image
wappalyzer
HTTP Archive fork of Wappalyzer
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.
