ppalermo Goto Github PK

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

amplifytest

api_wordlist

A wordlist of API names for web application assessments

bruteforce-database

Bruteforce database

burpjslinkfinder

Burp Extension for a passive scanning JS files for endpoint links.

codefresh-pipeline-snyk-app-docker-scan

Snyk CodeFresh Pipeline test

digitowl.io

digitowl WP on github

ducky

easy-xss-cookie-stealer

XSS cookie stealer using JavaScript and PHP

jndi-exploit-kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

meghna-hugo

Meghna Hugo is a responsive, minimalist, lightweight, and fast loading one-page business theme built with HTML5/CSS3, Hugo, JavaScript, and JQuery.

mindapi

Organize your API security assessment by using MindAPI. It's free and open for community collaboration.

myown

Standalone

offensive-ai-compilation

A curated list of useful resources that cover Offensive AI.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

permit-reflect

permit reflective access for java 11

phishingstuff

phishingstuff

ppmap

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

publicrep

desc01

pyad

Python Active Directory Tools

scripts

a collection of useful scripts that for penetration testers

sdlc-mgr

sdlc-mgr

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secutils

Random utilities from my security projects that might be useful to others

tbhm

The Bug Hunters Methodology

traildash

AWS CloudTrail Dashboard

xsshunter_client

Correlated injection proxy tool for XSS Hunter