Pinned Repositories
4-ZERO-3
403/401 Bypass Methods + Bash Automation + Your Support ;)
acornsgrow.github.io
acorn poc
Active-Directory-Exploitation-Cheat-Sheet
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
CTF-XXE
VCS-Challenge10-XXE
LEAKEY
LEAKEY is a bash script which checks and validates for leaked credentials. The idea behind LEAKEY is to make it highly customizable and easy to add checks for new services.
Realtime-Chat
Realtime chat using reactjs + websocket nodejs
Sky-Force-Game
Aircraft shooting game use javaswing and java socket
Store-web-jsp-serverlet
ToDoList
ToDo-List using ReactJS and NodeJS
VCS-5a
hnd3884's Repositories
hnd3884/4-ZERO-3
403/401 Bypass Methods + Bash Automation + Your Support ;)
hnd3884/Bug-Bounty-Dorks
hnd3884/RsaCtfTool
RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data
hnd3884/subjack
Subdomain Takeover tool written in Go
hnd3884/Amass
In-depth Attack Surface Mapping and Asset Discovery
hnd3884/hakrawler
Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application
hnd3884/markdown-here
Google Chrome, Firefox, and Thunderbird extension that lets you write email in Markdown and render it before sending.
hnd3884/minimal
Minimal is a Jekyll theme for GitHub Pages
hnd3884/shodan-python
The official Python library for Shodan
hnd3884/aspnetCryptTools
Just some random small tools for dealing with asp.net Forms Authentication Cookies
hnd3884/gadgetinspector
A byte code analyzer for finding deserialization gadget chains in Java applications
hnd3884/struts2-showcase
hnd3884/evilarc
Create tar/zip archives that can exploit directory traversal vulnerabilities
hnd3884/live-streaming
Design Project - HUST
hnd3884/DomLink
A tool to link a domain with registered organisation names and emails, to other domains.
hnd3884/AST-injection-ctf
Demo AST injection in Nodejs app
hnd3884/ruler
A tool to abuse Exchange services
hnd3884/rsa_sign2n
Deriving RSA public keys from message-signature pairs
hnd3884/fcm_server_key
Tool to extract & validate google fcm server keys from apks
hnd3884/LinkFinder
A python script that finds endpoints in JavaScript files
hnd3884/frontend-web20201
Công nghệ web 20201
hnd3884/CTF-XXE
VCS-Challenge10-XXE
hnd3884/UnsafeUploadFile-LFI
hnd3884/subdomain-enum
Subdomain Enumeration using Securitytrails API
hnd3884/marshalsec
hnd3884/WhatWaf
Detect and bypass web application firewalls and protection systems
hnd3884/Java-Rce-Echo
Java RCE 回显测试代码
hnd3884/VCS-5b
hnd3884/PowerSploit
PowerSploit - A PowerShell Post-Exploitation Framework
hnd3884/Bucket-Flaws
Bucket Flaws ( S3 Bucket Mass Scanner ): A Simple Lightweight Script to Check for Common S3 Bucket Misconfigurations