ethicalhackingplayground

aem-eye

A very simple AEM detector written in rust.🦀

bxss

Blind XSS Scanner is a tool that can be used to scan for blind XSS vulnerabilities in web applications.

dnsresolver

A Lightning-Fast DNS Resolver written in Rust 🦀

erebus

Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.

hostparser

A very fast hostparser.

pathbuster

A path-normalization pentesting tool.

shodan-grabber

Shodan-Grabber is a Node.js tool for scraping IP addresses and other information from Shodan's web interface. It utilizes Puppeteer for web scraping and handles rate limits by implementing retries with delays. The tool can run multiple scraping tasks in parallel and outputs the data to text files.

ssrf-king

SSRF plugin for burp Automates SSRF Detection in all of the Request

ssrf-tool

TProxer

A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.

ethicalhackingplayground/ssrf-king

SSRF plugin for burp Automates SSRF Detection in all of the Request

ethicalhackingplayground/erebus

Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.

ethicalhackingplayground/wordlistgen

Generates target specific word lists for Fuzzing with fuff

ethicalhackingplayground/linkJS

ethicalhackingplayground/xsspwn

Cross-Site-Scripting (XSS) Automatic Scanner

ethicalhackingplayground/tprox

TProx is a fast reverse proxy path traversal detector and directory bruteforcer.

ethicalhackingplayground/endzy

Endpoint monitor tool

ethicalhackingplayground/erebus-templates

Community curated list of templates for the erebus engine to find security vulnerabilities.

ethicalhackingplayground/recon_db_scripts

Creating a Database for Mass Recon

ethicalhackingplayground/bcaem

Fast AEM scope gathering tool for all your public and private BugCrowd Programs

ethicalhackingplayground/Gxss

Tool for checking reflecting Parameters in a URL.

ethicalhackingplayground/cloud-ranges

A list of cloud ranges from different providers.

ethicalhackingplayground/h1domains

HackerOne "in scope" domains

ethicalhackingplayground/403Bypasser

ethicalhackingplayground/asciinema2gif

Convert asciinema JSON files to GIF for embedding in Github, Medium, email, Slack and more!

ethicalhackingplayground/bbscope

Scope gathering tool for HackerOne, Bugcrowd, and Intigriti!

ethicalhackingplayground/Benchmark

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

ethicalhackingplayground/bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

ethicalhackingplayground/examples

chromedp code examples.

ethicalhackingplayground/FPS_Movement_Rigidbody

A physics based movement system

ethicalhackingplayground/gologger

A simple layer for leveled logging in go

ethicalhackingplayground/goproxy

An HTTP proxy library for Go

ethicalhackingplayground/md-handbook.acorns.com

ethicalhackingplayground/naabu

A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

ethicalhackingplayground/nuclei

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

ethicalhackingplayground/PadBuster

Automated script for performing Padding Oracle attacks

ethicalhackingplayground/pyreportcard

:traffic_light: A report card for Python application

ethicalhackingplayground/RAU_crypto

Telerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935)

ethicalhackingplayground/shiftleft-js-demo

ethicalhackingplayground/UnityURPUnlitScreenSpaceDecalShader

Unity unlit screen space decal shader for URP. Just create a new material using this shader, then assign it to a new unity cube GameObject = DONE, now you have unlit decal working in URP