Pinned Repositories
armory
Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of related information.
coldfusion_blazeds_des
Exploit for Adobe Coldfusion BlazeDS Java Object Deserialization RCE
dahua_dvr_auth_bypass
Dahua CCTV DVR Authentication Bypass Metasploit Scanning Module
Hash-Check
Python Burp extension to check requests and responses for potential password hashes
haveIbeenHarvested
Automated HaveIbeenPwned lookups using theharvester results
IntruderPayloads
A collection of Burpsuite Intruder payloads, fuzz lists and file uploads
NetMRI-2014-3418
passpr3y
Unix-Privilege-Escalation-Exploits-Pack
Exploits for getting local root on Linux, BSD, AIX, HP-UX, Solaris, RHEL, SUSE etc.
xxeserv
A simple, python-based web server for hunting XXE bugs
Depth Security's Repositories
depthsecurity/armory
Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of related information.
depthsecurity/dahua_dvr_auth_bypass
Dahua CCTV DVR Authentication Bypass Metasploit Scanning Module
depthsecurity/haveIbeenHarvested
Automated HaveIbeenPwned lookups using theharvester results
depthsecurity/coldfusion_blazeds_des
Exploit for Adobe Coldfusion BlazeDS Java Object Deserialization RCE
depthsecurity/NetMRI-2014-3418
depthsecurity/passpr3y
depthsecurity/xxeserv
A simple, python-based web server for hunting XXE bugs
depthsecurity/Hash-Check
Python Burp extension to check requests and responses for potential password hashes
depthsecurity/IntruderPayloads
A collection of Burpsuite Intruder payloads, fuzz lists and file uploads
depthsecurity/Unix-Privilege-Escalation-Exploits-Pack
Exploits for getting local root on Linux, BSD, AIX, HP-UX, Solaris, RHEL, SUSE etc.
depthsecurity/armory-docker
depthsecurity/Drupalgeddon2
Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)
depthsecurity/Phishing.Database
Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.
depthsecurity/pymeta
Pymeta will search the web for files on a domain to download and extract metadata. This technique can be used to identify: domains, usernames, software/version numbers and naming conventions.