manuel-sommer

manuel-sommer's Stars

• apache/superset

  Apache Superset is a Data Visualization and Data Exploration Platform

  Language:TypeScript63.6k1.5k10.9k14.2k

• blacklanternsecurity/bbot

  The recursive internet scanner for hackers. 🧡

  Language:Python7.5k59899562

• Azure/Azure-Sentinel

  Cloud-native SIEM for intelligent security analytics for your entire enterprise.

  Language:Python4.7k2401.4k3.1k

• everywall/ladder

  Selfhosted alternative to 12ft.io. and 1ft.io bypass paywalls with a proxy ladder and remove CORS headers from any URL

  Language:Go4.6k2238178

• S3cur3Th1sSh1t/WinPwn

  Automation for internal Windows Penetrationtest / AD-Security

  Language:PowerShell3.4k8344527

• Findomain/Findomain

  The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.

  Language:Rust3.4k58161370

• x90skysn3k/brutespray

  Bruteforcing from various scanner output - Automatically attempts default creds on found services.

  Language:Go2.1k7949384

• lutfumertceylan/top25-parameter

  For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

  1.7k445270

• s4n7h0/xvwa

  XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.

  Language:PHP1.7k8124338

• enjoiz/XXEinjector

  Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

  Language:Ruby1.6k5510315

• dwisiswant0/crlfuzz

  A fast tool to scan CRLF vulnerability written in Go

  Language:Go1.4k1715144

• hakluke/weaponised-XSS-payloads

  XSS payloads designed to turn alert(1) into P1

  Language:JavaScript1.3k463217

• tadwhitaker/Security_Engineer_Interview_Questions

  Every Security Engineer Interview Question From Glassdoor.com

  1.2k400218

• screetsec/Dracnmap

  Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of options that can make the utility more robust and difficult to follow for new users. Hence Dracnmap is designed to perform fast scaning with the utilizing script engine of nmap and nmap can perform various automatic scanning techniques with the advanced commands.

  Language:Shell1.2k9125270

• elkokc/reflector

  Burp plugin able to find reflected XSS on page in real-time while browsing on site

  Language:Java1.1k3421162

• TakSec/google-dorks-bug-bounty

  A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting

  1.1k150172

• BuffaloWill/oxml_xxe

  A tool for embedding XXE/XML exploits into different filetypes

  Language:Ruby1.1k3230230

• wireghoul/dotdotpwn

  DotDotPwn - The Directory Traversal Fuzzer

  Language:Perl1k3723180

• r0075h3ll/Oralyzer

  Open Redirection Analyzer

  Language:Python7591719105

• incredibleindishell/SSRF_Vulnerable_Lab

  This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack

  Language:PHP681195176

• utkusen/promptmap

  automatically tests prompt injection attacks on ChatGPT instances

  Language:Python67213060

• cujanovic/Open-Redirect-Payloads

  Open Redirect Payloads

  Language:Shell591202179

• capture0x/XSS-LOADER

  Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

  Language:Python570156115

• TheCyb3rAlpha/BobTheSmuggler

  "Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file format, then XOR encrypt the archive and then hides inside PNG/GIF image file format (Image Polyglots).

  Language:Python5019657

• jcesarstef/dotdotslash

  Search for Directory Traversal Vulnerabilities

  Language:Python42017664

• aquasecurity/vuln-list

  NVD, Ubuntu, Alpine

  414261516

• fcavallarin/domdig

  DOM XSS scanner for Single Page Applications

  Language:JavaScript39712948

• faiyazahmad07/xss_vibes

  A modern tool written in Python that automates your xss findings.

  Language:Python38671271

• lauritzh/domscan

  Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.

  Language:JavaScript23021134

• roughiz/lfito_rce

  LFI to RCE via phpinfo() assistance or via controlled log file

  Language:Python602112