vampshacks Goto Github PK

404checker

Auxiliary script thought to be used in Red Team exercises to check if an URL redirects to a masked 404 (such as 200 that redirects to a "Not found" page or similars). URLs must be passed sorted in order to improve performance.

45233.1.py

exploit 45233.py fixed for python 3

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

awesome-azure-pentest

A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

aws_iam_review

books

burpa

Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used to setup Dynamic Application Security Testing (DAST).

burpsuite-for-pentester

This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and completely with "BurpSuite".

ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

countdown-timer

A countdown timer for when you are streaming on Twitch using OBS

cve-2018-15473

OpenSSH 2.3 < 7.7 - Username Enumeration

cve-2021-41773

Apache2 2.4.49 - LFI & RCE Exploit - CVE-2021-41773

cve-2023-20198

An Exploitation script developed to exploit the CVE-2023-20198 Cisco zero day vulnerability on their IOS routers

cve-2024-21762-check

Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762

dnsgen

Generates combination of domain names from the provided input.

dvwp

Damn Vulnerable WordPress

edge

Recon tool for cloud provider attribution.

ethical-hacking-notes

my notes

git-dumper

A tool to dump a git repository from a website

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

jaeles

The Swiss Army knife for automated Web Application Testing

jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

katana

A next-generation crawling and spidering framework.

meg

Fetch many paths for many hosts - without killing the hosts

nahamsec.training

The labs for my Udemy course (https://www.udemy.com/course/intro-to-bug-bounty-by-nahamsec)

nthw

Not The Hidden Wiki - The largest repository of links related to cybersecurity

onelistforall

Rockyou for web fuzzing

openluck

OpenFuck exploit updated to linux 2018 - Apache mod_ssl < 2.8.7 OpenSSL - Remote Buffer Overflow

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pimpmykali

Kali Linux Fixes for Newly Imported VM's