Menn1s

Menn1s's Stars

• BKreisel/sqlmap-websocket-proxy

  Tool to enable blind sql injection attacks against websockets using sqlmap

  Language:Python576

• cmu-sei/pharos

  Automated static analysis tools for binary programs

  Language:C++1.6k191

• LaurieWired/iOS_Reverse_Engineering

  The iOS IPA file Reverse Engineering reference

  Language:Python29026

• DevanshRaghav75/AutomationGuide

  Learn how to automate XSS, SSRF, LFI, SQLI, NoSQLi

  3811

• initstring/linkedin2username

  OSINT Tool: Generate username lists for companies on LinkedIn

  Language:Python1.3k188

• christophetd/Adaz

  :wrench: Deploy customizable Active Directory labs in Azure - automatically.

  Language:HCL41084

• ndelphit/apkurlgrep

  Extract endpoints from APK files

  Language:Go773107

• radareorg/radare2-r2pipe

  Access radare2 via pipe from any programming language!

  Language:JavaScript38899

• remote-android/redroid-doc

  redroid (Remote-Android) is a multi-arch, GPU enabled, Android in Cloud solution. Track issues / docs here

  Language:Shell4.3k309

• Cy-clon3/awesome-ios-security

  A curated list of awesome iOS application security resources.

  51962

• DERE-ad2001/Frida-Labs

  The repo contains a series of challenges for learning Frida for Android Exploitation.

  904127

• gelosecurity/GetAndroidUnprotectedComponents

  parse out unprotected AndroidComponents

  Language:Python1

• praetorian-inc/noseyparker

  Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.

  Language:Rust1.7k81

• koush/scrypted

  Scrypted is a high performance video integration and automation platform

  Language:TypeScript4.3k254

• Nyr/openvpn-install

  OpenVPN road warrior installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS and Fedora

  Language:Shell19.2k4.9k

• projectdiscovery/interactsh

  An OOB interaction gathering server and client library

  Language:Go3.4k366

• m3n0sd0n4ld/GooFuzz

  GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).

  Language:Shell1.3k136

• TakSec/google-dorks-bug-bounty

  A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting

  1k161

• c3c/ADExplorerSnapshot.py

  ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.

  Language:Python889120

• kleiton0x00/XSScope

  XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.

  Language:HTML31278

• slyd0g/SwiftSpy

  macOS keylogger, clipboard monitor, and screenshotter

  Language:Swift789

• hahwul/dalfox

  🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

  Language:Go3.8k421

• vdohney/keepass-password-dumper

  Original PoC for CVE-2023-32784

  Language:C#62456

• mgastonportillo/gale-for-ff

  CSS files to theme Firefox with Sidebery

  Language:CSS12012

• Kudaes/Split

  Apply a divide and conquer approach to bypass EDRs

  Language:Rust27424

• mandiant/commando-vm

  Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

  Language:PowerShell7k1.3k

• robert/gamebert

  A Game Boy emulator written by Robert

  Language:Go30

• tillson/git-hound

  Reconnaissance tool for GitHub code search. Scans for exposed API keys across all of GitHub, not just known repos and orgs.

  Language:Go1.2k187

• decoder-it/LocalPotato

  Language:C++66592

• KingOfBugbounty/KingOfBugBountyTips

  Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

  Language:Go4.2k813