jeffreyshran Goto Github PK

8-bit-computer-pcb

These are the KiCAD files for my 8-Bit Computer.

adduser-dll

Simple DLL that add a user to the local Administrators group

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

arjun

HTTP parameter discovery suite.

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

blind-ssrf

Nuclei Templates to reproduce Cracking the lens's Research

bounty-targets

This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) hourly and dumps them into the bounty-targets-data repo

bug-bounty-toolz

BBT - Bug Bounty Tools

byp-sop

🏴‍☠️ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files 🏴‍☠️

bypass-url-parser

bypass-url-parser

certfuzz

This project contains the source code for the CERT Basic Fuzzing Framework (BFF) and the CERT Failure Observation Engine (FOE).

cheat-sheets

A list of cheat sheets for application security

cicd-goat

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

code-scanning-javascript-demo

GitHub Code Scanning Javascript Tutorial

commodity-injection-signatures

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

cors-one-liner

A one liner Bash command which finds CORS in every possible endpoint.

crlf-one-liner

A simple Bash one liner with aim to automate CRLF vulnerability scanning.

cve-2019-18935

RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.

cve-2021-26084

Atlassian Confluence Pre-Auth RCE

cve-2023-4427

degoogle

search Google and extract results directly. skip all the click-through links and other sketchiness

dns-analysis-server

Tools to assess DNS security.

dotfiles

elevationstation

elevate to SYSTEM any way we can!

esp8266

evilarc

Create tar/zip archives that can exploit directory traversal vulnerabilities

exploit-notes

Sticky notes for pentesting.