thecybotage

thecybotage's Stars

• enjoiz/XXEinjector

  Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

  Language:Ruby1.5k313

• itm4n/PPLdump

  Dump the memory of a PPL with a userland exploit

  Language:C847137

• stealthcopter/deepce

  Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

  Language:Shell1.2k104

• fuzzdb-project/fuzzdb

  Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

  Language:PHP8.3k2.1k

• KingOfBugbounty/KingOfBugBountyTips

  Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

  Language:Go4.2k815

• assetnote/kiterunner

  Contextual Content Discovery Tool

  Language:Go2.7k298

• spipm/Depix

  Recovers passwords from pixelized screenshots

  Language:Python26.1k3.2k

• mandiant/capa

  The FLARE team's open-source tool to identify capabilities in executable files.

  Language:Python4.9k564

• sushiwushi/bug-bounty-dorks

  List of Google Dorks for sites that have responsible disclosure program / bug bounty program

  1.2k382

• techgaun/github-dorks

  Find leaked secrets via github search

  Language:Python2.8k591

• enaqx/awesome-pentest

  A collection of awesome penetration testing resources, tools and other shiny things

  22k4.5k

• ahussam/url-tracker

  Change monitoring app that checks the content of web pages in different periods.

  Language:JavaScript34157

• Tylous/Limelighter

  A tool for generating fake code signing certificates or signing real ones

  Language:Go881131

• internetwache/GitTools

  A repository with 3 tools for pwn'ing websites with .git repositories available

  Language:Shell3.9k624

• JonathanSalwan/ROPgadget

  This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

  Language:Python4k557

• S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet

  A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

  5.7k1.2k

• Ne0nd0g/merlin

  Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

  Language:Go5.1k803

• wifiphisher/wifiphisher

  The Rogue Access Point Framework

  Language:Python13.3k2.6k

• blacklanternsecurity/writehat

  A pentest reporting tool written in Python. Free yourself from Microsoft Word.

  Language:Python1.3k228

• pwndoc/pwndoc

  Pentest Report Generator

  Language:JavaScript2.3k432

• projectdiscovery/nuclei-templates

  Community curated list of templates for the nuclei engine to find security vulnerabilities.

  Language:JavaScript9.4k2.7k

• google/tsunami-security-scanner

  Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

  Language:Java8.3k894

• tomnomnom/unfurl

  Pull out bits of URLs provided on stdin

  Language:Go1.1k122

• haccer/subjack

  Subdomain Takeover tool written in Go

  Language:Go1.9k337

• x90skysn3k/brutespray

  Bruteforcing from various scanner output - Automatically attempts default creds on found services.

  Language:Go2k385

• hakluke/hakrawler

  Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

  Language:Go4.5k498

• lc/gau

  Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

  Language:Go4k451

• GerbenJavado/LinkFinder

  A python script that finds endpoints in JavaScript files

  Language:Python3.7k597

• httpvoid/writeups

  1.2k172

• projectdiscovery/httpx

  httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

  Language:Go7.8k847