unashamedgeek Goto Github PK

agartha

a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to spot authentication/authorization issues, and converts Http requests to Javascript for further XSS exploitation and more.

anew

A tool for adding new lines to files, skipping duplicates

ansicodes

🎨ansi escape code generator to help make colorful command line tools

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

blind-css-exfiltration

burp-piper-custom-scripts

Custom scripts for the PIPER Burp extensions.

burpintruderdownloader

https://www.n00py.io/2020/05/extracting-files-from-burp-intruder-output/

chatgpterminator

ChatGPT in the terminal!

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

cloudfox

Automating situational awareness for cloud penetration tests.

cors-poc

de4js

JavaScript Deobfuscator and Unpacker

deeppass

Hunting for passwords with deep learning

dfang-zsh

dnserver

Simple development DNS server written in python

ghostwriter

The SpecterOps project management and reporting engine

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

hosts

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

houndsniff

Hash identification program.

interactsh

An OOB interaction gathering server and client library

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

jack

Drag and Drop ClickJacking PoC development assistance tool.

jarm

java-android-magisk-burp-objection-root-emulator-easy

Java Android Magisk Burp Objection Root Emulator Easy (JAMBOREE)

ldapnomnom

Anonymously bruteforce Active Directory usernames from Domain Controllers by abusing LDAP Ping requests (cLDAP)

lego

Let's Encrypt/ACME client and library written in Go

linsk

📂 Access Linux-native file systems (including LVM and LUKS) on Windows and macOS with help of a lightweight Alpine Linux VM. x86/ARM supported.

mitm_intercept

A little bit less hackish way to intercept and modify non-HTTP protocols through Burp & others.

my-poc-exploits

PoC exploits I wrote. They're as is and I will not offer support