syh4ck Goto Github PK

awesome-web-security

🐶 A curated list of Web Security materials and resources.

awspx

A graph-based tool for visualizing effective access and resource relationships in AWS environments.

awvs12_docker

AWVS12 最新版本12.0.190902105_x64

azur3alph4

Azur3Alph4 is a PowerShell module that automates red-team tasks for ops on objective. This module situates in a post-breach (RCE achieved) position.

bbqsql

SQL Injection Exploitation Tool

blackmamba

C2/post-exploitation framework

bug-bounty-roadmaps

Bug Bounty Roadmaps

bugbountytips

bugbountytips

bughound

Static code analysis tool based on Elasticsearch

burp-bounty

Burp Bounty profiles

burpbountyplus

BurpBounty 魔改版本

burpsuite-team-extension

This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes through your Burpsuite instance will be replicated in the history of the other testers and vice-versa!

c41n

c41n is an automated rogue access point setup tool.

cacti

Cacti ™

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

capsulecorp-pentest

Vagrant VirtualBox environment for conducting an internal network penetration test

chromepass

Chromepass - Hacking Chrome Saved Passwords

cis-benchmark-scripts

CIS Benshmarks Scripts

cis-config_script

CIS Standard Config Script

ciscosmartinstallexploit

clonemultiplerepo-once

Small bash script to clone multiple repos

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cobalt-wipe

Cobalt wipe is the non-commercial version of Cobalt-Strike 4.3 (May 2021 Release)

code-server

VS Code in the browser

contracts

A small collection of potentially useful contract templates

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

ctf-tools

tổng hợp tool ctf

cve-2020-0688_exp

CVE-2020-0688_EXP Auto trigger payload & encrypt method

cve-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

cve-2021-31166

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.