rundx's Stars
jomisica/log-credentials
PAM Log Credentials
d4rk007/RedGhost
Linux post exploitation framework written in bash designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no trace.
hc0d3r/tea
ssh-client worm
wallabag/wallabag
wallabag is a self hostable application for saving web pages: Save and classify articles. Read them later. Freely.
securityidiots/CollabOzark
CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE, External Resource Access payloads triggers.
0x0FB0/pulsar
Network footprint scanner platform. Discover domains and run your custom checks periodically.
WSP-LAB/FUSE
A penetration testing tool for finding file upload bugs (NDSS 2020)
teknogeek/ssrf-sheriff
A simple SSRF-testing sheriff written in Go
viatsko/awesome-vscode
🎨 A curated list of delightful VS Code packages and resources.
WangYihang/GitHacker
🕷️ A `.git` folder exploiting tool that is able to restore the entire Git repository, including stash, common branches and common tags.
xsscx/Commodity-Injection-Signatures
Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT
P3GLEG/PwnBack
Burp Extender plugin that generates a sitemap of a website using Wayback Machine
thinkst/canarytokens-docker
Docker configuration to quickly setup your own Canarytokens.
infobyte/faraday
Open Source Vulnerability Management Platform
codingo/VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
sa7mon/S3Scanner
Scan for misconfigured S3 buckets across S3-compatible APIs!
cobbr/Covenant
Covenant is a collaborative .NET C2 framework for red teamers.
dylanaraps/pure-bash-bible
📖 A collection of pure bash alternatives to external processes.
Telefonica/ibombshell
Tool to deploy a post-exploitation prompt at any time
Damian89/extended-ssrf-search
Smart ssrf scanner using different methods like parameter brute forcing in post and get...
GregorR/musl-cross
A small suite of scripts and patches for building musl libc cross compilers.
richfelker/musl-cross-make
Simple makefile-based build for musl cross compiler
ajinabraham/aws_security_tools
Scripts and tools for AWS Pentest
RhinoSecurityLabs/pacu
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
dagrz/aws_pwn
A collection of AWS penetration testing junk
HynekPetrak/sshame
brute force SSH public-key authentication
ncsa/ssh-auditor
The best way to scan for weak ssh passwords on your network
LewisArdern/bXSS
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
wavestone-cdt/wavecrack
Wavestone's web interface for password cracking with hashcat
wavestone-cdt/abaddon