drag0s-sc Goto Github PK

amass

In-depth Attack Surface Mapping and Asset Discovery

brutesubs

An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker Compose

burpssoextension

An extension for BurpSuite that highlights SSO messages in Burp's proxy window..

chainsaw

Rapidly Search and Hunt through Windows Event Logs

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

cve-2021-26084

CVE-2021-26084 - Confluence Server Webwork OGNL injection (Pre-Auth RCE)

cve-2021-40444

CVE-2021-40444 PoC

cve-2021-40449-exploit

windows 10 14393 LPE

devops-exercises

Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic, Network, Virtualization. DevOps Interview Questions

dora

Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found

fernmelder

async mass DNS resolver

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

ncl

nuclei framework scripts

nthim

Now, the Host is Mine! - Super Fast Sub-domain Takeover Detection!

nuclei-templates-collection

Nuclei Templates Collection

owasp-calculator

🧮 An online calculator to assess the risk of web vulnerabilities based on OWASP Risk Assessment

pentest-book

pwnat

The only tool and technique to punch holes through firewalls/NATs where both clients and server can be behind separate NATs without any 3rd party involvement. Pwnat uses a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, router administrative requirements, STUN/TURN/UPnP/ICE, or spoofing required.

shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories: www.shhgit.com

socialhunter

crawls the website and finds broken social media links that can be hijacked

the-nuclei-templates

Nuclei templates written by us.

tko-subs

A tool that can help detect and takeover subdomains with dead DNS records

yasca

Yet Another SCA tool