mgcfish Goto Github PK

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

inveigh

Inveigh is a Windows PowerShell LLMNR/NBNS spoofer with challenge/response capture over HTTP/SMB

invoke-cradlecrafter

PowerShell Remote Download Cradle Generator & Obfuscator

invoke-obfuscation

PowerShell Obfuscator

invoke-processscan

Gives context to a system. Uses EQGRP shadow broker leaked list to give some descriptions to processes.

invoke-thehash

PowerShell Pass The Hash Utils

invoke-tmpdavfs

In Memory Powershell WebDav Server

invoke-wcmdump

PowerShell Script to Dump Windows Credentials from the Credential Manager

ios-ssl-kill-switch

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps

iot-penetration-testing-cookbook

IoT Penetration Testing Cookbook, published by Packt

iotanalysis

IoTAnalysis Docker

iotpasswds

Recording default/backdoor passwords from IoT devices I come across

iotseeker

Created by Jin Qian via the GitHub Connector

iptoasn-webservice

Web service to map IP addresses to AS information, using iptoasn.com

ipv4bypass

Using IPv6 to Bypass Security

ipv6dnsexfil

Data Exfiltration and Command Execution via AAAA Records

ironwasp

Source code of IronWASP

ironwasp_installer

Ironwasp installer scripts and resources for linux and mac users.

ispy

A reverse engineering framework for iOS

istorexit

Check if an IP is a Tor exit node

j2eescan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

jack

Drag and Drop ClickJacking PoC development assistance tool.

jaeles

The Swiss Army knife for automated Web Application Testing

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

java-deserialization-scanner

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

java-web-vulnerabilities

Plattform to develop and experiment with existing java web attacks.

javadeserh2hc

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

javapayload

JavaPayload is a collection of pure Java payloads to be used for post-exploitation from pure Java exploits or from common misconfigurations (like not password protected Tomcat manager or debugger port).

javasec

自己学习java安全的一些总结，主要是安全审计相关

javaunserializeexploits