ldionmarcil

ldionmarcil's Stars

• vulhub/vulhub

  Pre-Built Vulnerable Environments Based on Docker-Compose

  Language:Dockerfile17.8k5791854.5k

• projectdiscovery/katana

  A next-generation crawling and spidering framework.

  Language:Go12.2k91292630

• frohoff/ysoserial

  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

  Language:Java7.8k2131051.8k

• streaak/keyhacks

  Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

  5.1k106631k

• six2dez/OneListForAll

  Rockyou for web fuzzing

  Language:Shell2.6k464471

• leibnitz27/cfr

  This is the public repository for the CFR Java decompiler

  Language:Java2.1k52299263

• ssl/ezXSS

  ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

  Language:PHP1.9k54132332

• projectdiscovery/cvemap

  Navigate the CVE jungle with ease.

  Language:Go1.8k2445115

• wallarm/gotestwaf

  An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

  Language:Go1.6k4274215

• fnmsd/MySQL_Fake_Server

  MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize

  Language:Python1.2k713151

• emacs-evil/evil-collection

  A set of keybindings for evil-mode

  Language:Emacs Lisp1.2k26355272

• mstrobel/procyon

  Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.

  Language:Java1k2454119

• ptoomey3/evilarc

  Create tar/zip archives that can exploit directory traversal vulnerabilities

  Language:Python976150181

• ayoubfathi/leaky-paths

  A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

  936260155

• fyoorer/ShadowClone

  Unleash the power of cloud

  Language:Python733136298

• narfindustries/http-garden

  Differential fuzzing REPL for HTTP implementations.

  Language:Python714126464

• PortSwigger/BChecks

  BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition

  6352472112

• GoSecure/dtd-finder

  List DTDs and generate XXE payloads using those local DTDs.

  Language:Kotlin614143106

• BishopFox/GadgetProbe

  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

  Language:Java58517192

• BlackFan/content-type-research

  Content-Type Research

  54020254

• awslabs/threat-composer

  A simple threat modeling tool to help humans to reduce time-to-value when threat modeling

  Language:TypeScript475161255

• mazen160/server-status_PWN

  A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-status instances.

  Language:Python43118779

• hoodoer/JS-Tap

  JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the targeted application. Also includes a C2 for executing custom JavaScript payloads in clients, and a "mimic" feature that automatically generates custom payloads.

  Language:JavaScript3385435

• boostsecurityio/poutine

  boostsecurityio/poutine

  Language:Go23275324

• doyensec/Session-Hijacking-Visual-Exploitation

  Session Hijacking Visual Exploitation

  Language:JavaScript19481415

• cloudflare/python-workers-examples

  Language:Python104151019

• artsploit/rogue-jndi

  A malicious LDAP server for JNDI injection attacks

  Language:Java724013

• mogwailabs/jarjarbigs

  A python script to merge multiple jar files for easier debugging via JD-Eclipse

  Language:Python613212

• caido/workflows

  🛠️ Workflows created by the community

  Language:JavaScript606017

• vrechson/copy-to-bcheck

  BurpSuite extension to convert requests into bcheck scripts

  Language:Java30104