mathis2001

Android-nuclei-templates

List of useful Nuclei templates for Android apps static analysis

Cert4Recon

Simple passive Python Recon tool for subdomains enumeration with crt.sh

Dorking

Some Dorking resources

Files-upload

Some useful files for upload features pentesting

M4ldu1n-Oh

Collection of malduino scripts for pentesters and red teaming.

ParamChanger

ParamChanger is a tool allowing you to replace the parameters of a list of urls by a payload entered as an argument

ParamFirstCheck

ParamFirstCheck identifies in a list of urls those containing a parameter of the top 25 of the most vulnerable parameters for SQLi, LFI, RCE and Open redirect

Showldan

Recon tool using shodan API to automate shodan information gathering process and find juicy stuff during bug hunting.

Sp00fy

Simple python script to check for email spoofing on a given domain.

WebHackUrls

Simple python OSINT tool for urls recon thanks to the waybackmachine.

mathis2001/Cert4Recon

Simple passive Python Recon tool for subdomains enumeration with crt.sh

mathis2001/ParamChanger

ParamChanger is a tool allowing you to replace the parameters of a list of urls by a payload entered as an argument

mathis2001/Sp00fy

Simple python script to check for email spoofing on a given domain.

mathis2001/SubPwnable

Are your (sub)domains pwnable ? SubPwnable is a simple Python tool designed to helps you answer this question.

mathis2001/Reflection

Reflected parameters checker for a list of urls. (Beta version needing a lot of improvement)

mathis2001/403Bytepass

Python tool for forbidden urls bypassing

mathis2001/DirHunter

Outil de brute force des repertoires de sites web semblable à dirbuster. (Mais avec une petite touche personnelle)

mathis2001/GitDiscloser

Python recon tool for Github information disclosure research

mathis2001/Mail_Bomber

Python mail bomber script

mathis2001/Mysql-bruteforce

Python script for Mysql root account connexion bruteforce

mathis2001/Parcours_DD_Recherche

mathis2001/EzComments

EzComments is a tool allowing you to get all html and js comments of each url given to him

mathis2001/LightSSTICheck

LightSSTICheck is a tool designed to find basic SSTI vulnerabilities

mathis2001/PathTrunc

mathis2001/Simu_FilDeLaine

maquette simulant le système de fil de laine présents dans les avions avec une carte arduino uno, deux ventilateur 12V à 2 fils et deux potentiometres servants de levier et de palonnier. Les détails du montage de la maquette sont dans le dossier images.

mathis2001/tapjacker

Android tapjacking quick PoC tool