ebrandel

ebrandel's Stars

• jehna/humanify

  Deobfuscate Javascript code using ChatGPT

  Language:TypeScript1.4k55

• frohoff/ysoserial

  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

  Language:Java7.7k1.8k

• ambionics/phpggc

  PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

  Language:PHP3.2k492

• rowyio/rowy

  Low-code backend platform. Manage database on spreadsheet-like UI and build cloud functions workflows in JS/TS, all in your browser.

  Language:TypeScript6k484

• devanshbatham/FavFreak

  Making Favicon.ico based Recon Great again !

  Language:Python1.1k170

• silence-is-best/c2db

  c2 traffic

  18719

• malwareinfosec/EKFiddle

  Your Swiss Army knife to analyze malicious web traffic based on the popular Fiddler web debugger.

  Language:C#634131

• ciscocsirt/PW3Query

  PW3Query is a serverless query agent and repository for PublicWWW with a focus on proactively generating threat intelligence related to web compromises.

  Language:Python184

• misterch0c/what_is_this_c2

  For all these times you're asking yourself "what is this panel again?"

  25053

• d0nutptr/sic

  A tool to perform Sequential Import Chaining

  Language:Rust25216

• mindedsecurity/JStillery

  Advanced JavaScript Deobfuscation via Partial Evaluation

  Language:JavaScript857143

• RhinoSecurityLabs/GCPBucketBrute

  A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

  Language:Python47981

• elceef/dnstwist

  Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

  Language:Python4.8k767

• gwillem/magento-malware-scanner

  Scanner, signatures and the largest collection of Magento malware

  Language:HTML680153

• GTFOBins/GTFOBins.github.io

  GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

  Language:HTML10.7k1.3k

• HynekPetrak/javascript-malware-collection

  Collection of almost 40.000 javascript malware samples

  Language:JavaScript671237

• EdOverflow/bugbounty-cheatsheet

  A list of interesting payloads, tips and tricks for bug bounty hunters.

  5.8k1.5k

• swisskyrepo/PayloadsAllTheThings

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Language:Python60.4k14.5k

• nahamsec/bbht

  A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

  Language:Shell1.2k431

• vulnersCom/getsploit

  Command line utility for searching and downloading exploits

  Language:Python1.7k240

• 1N3/Sn1per

  Attack Surface Management Platform

  Language:Shell8k1.8k

• EdOverflow/can-i-take-over-xyz

  "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

  Language:Python4.8k712

• haccer/subjack

  Subdomain Takeover tool written in Go

  Language:Go1.9k333

• cailen/elastalert-docker

  Docker image with Elastalert on Alpine Linux

  Language:Shell1

• hasherezade/bunitu_tests

  Scripts for communication with Bunitu Trojan C&Cs

  Language:Python1615

• shawarkhanethicalhacker-zz/BruteXSS

  BruteXSS - Cross-Site Scripting Bruteforcer

  Language:Python465163

• s0md3v/XSStrike

  Most advanced XSS scanner.

  Language:Python13.2k1.9k

• jwasham/coding-interview-university

  A complete computer science study plan to become a software engineer.

  305k76.6k

• egaus/pcap2bro

  Given pcap generate bro logs and ingest into ELK

  Language:Bro4

• minimaxir/big-list-of-naughty-strings

  The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

  Language:Python46.2k2.1k