murthysagi Goto Github PK

tomcatwardeployer

Apache Tomcat auto WAR deployment & pwning penetration testing tool.

top10

Official OWASP Top 10 Document Repository

tplmap

Automatic Server-Side Template Injection Detection and Exploitation Tool

tusk

Refined Evernote desktop app

ubertooth

Software, firmware and hardware designs for Ubertooth

unix-privesc-check

Shell script that runs on UNIX systems (tested on Solaris 9, HPUX 11, various Linux distributions, FreeBSD 6.2). It detects misconfigurations that could allow local unprivileged user to escalate to other users (e.g. root) or to access local apps (e.g. databases). This is a collaborative rework of version 1.0

vagrant-ansible-gerrit-lab

vagrant-jenkins

Install a virtual box with Jenkins via Vagrant and Puppet

vba-json

JSON conversion and parsing for VBA

vhostscan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages.

vulnreport

Open-source pentesting management and automation platform by Salesforce Product Security

vulnserver

Vulnerable server used for learning software exploitation

vulscan

Advanced vulnerability scanning with Nmap NSE

wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

watobo

watson

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

web-security-101-slides

[OUTDATED AS OF 08/2016] Slides of my "Web Security 101" lecture.

web_application_project

webappsec

Web Application Security

webbreaker

Dynamic Application Security Test Orchestration (DASTO)

webshell

This is a webshell open source project

windapsearch

Python script to enumerate users, groups and computers from a Windows domain through LDAP queries

windows-exploit-suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

windows-kernel-exploits-1

Windows Kernel Exploits

winpe

Windows privilege escalation with cmd

xoscillo

Multiplatform software oscilloscope and logical analyzer (updated version)

xss-payloads

List of advanced XSS payloads

xsshunter_client

Correlated injection proxy tool for XSS Hunter

xvwa

XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.