glyptho
Offensive Security Researcher. Interested in Defense Evasion techniques. Bugcrowd Security Bug Hunter, focused on automated vulnerability discovery.
somewhere in the universe
Pinned Repositories
ApkAnalyser
一键提取安卓应用中可能存在的敏感信息。
AutoSUID
AutoSUID application is the Open-Source project, the main idea of which is to automate harvesting the SUID executable files and to find a way for further escalating the privileges.
bounty-targets-data
This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports
CHAOS
:fire: CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.
Dependency-Confusion
All About Dependency Confusion Attack, (Detecting, Finding, Mitigating)
glyptho
Config files for my GitHub profile.
gnuclei
This script will launch the Nuclei for selected severity like (info,low,medium,high,critical) against a subdomain list or ip list for check vulnerability.
myreconmethods
This includes the methods of recon and exploit for Bug Bounty.
newassets
I have collected different open source tools for my bug-bounty. So in this repo i have organized them in a systematic way. So whenever i need something i can easily find required tools
templatesallnuclei
This includes all the templates of nuclei collected from different sources
glyptho's Repositories
glyptho/templatesallnuclei
This includes all the templates of nuclei collected from different sources
glyptho/myreconmethods
This includes the methods of recon and exploit for Bug Bounty.
glyptho/newassets
I have collected different open source tools for my bug-bounty. So in this repo i have organized them in a systematic way. So whenever i need something i can easily find required tools
glyptho/glyptho
Config files for my GitHub profile.
glyptho/ApkAnalyser
一键提取安卓应用中可能存在的敏感信息。
glyptho/AutoSUID
AutoSUID application is the Open-Source project, the main idea of which is to automate harvesting the SUID executable files and to find a way for further escalating the privileges.
glyptho/bounty-targets-data
This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports
glyptho/CHAOS
:fire: CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.
glyptho/Dependency-Confusion
All About Dependency Confusion Attack, (Detecting, Finding, Mitigating)
glyptho/Fast-Google-Dorks-Scan
The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.
glyptho/gnuclei
This script will launch the Nuclei for selected severity like (info,low,medium,high,critical) against a subdomain list or ip list for check vulnerability.
glyptho/CSAgent
CobaltStrike 4.x通用白嫖及汉化加载器
glyptho/frogy
My subdomain enumeration script. It's unique in the way it is built upon.
glyptho/fscan
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。
glyptho/goby_poc
goby poc or exp,分享goby最新网络安全漏洞检测或利用代码
glyptho/goon
goon,集合了fscan和kscan等优秀工具功能的扫描爆破工具。功能包含：ip探活、port扫描、web指纹扫描、title扫描、压缩文件扫描、fofa获取、ms17010、mssql、mysql、postgres、redis、ssh、smb、rdp、telnet、tomcat等爆破以及如netbios探测等功能。
glyptho/Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
glyptho/Viper
支持主动式&被动式Log4j漏洞扫描 Intranet pentesting tool with webui 开源图形化内网渗透工具
glyptho/XLR8_BOMBER
A Superfast SMS & Call bomber for Linux And Termux !
glyptho/xray
一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档