zsahi

zsahi's Stars

• arkadiyt/bounty-targets-data

  This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

  3.1k588

• lanjelot/patator

  Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

  Language:Python3.6k784

• lobuhi/byp4xx

  40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...

  Language:Go1.6k282

• PortSwigger/hackbar

  HackBar plugin for Burpsuite

  Language:Java256

• koutto/web-brutator

  Fast Modular Web Interfaces Bruteforcer

  Language:Python21542

• sqlmapproject/sqlmap

  Automatic SQL injection and database takeover tool

  Language:Python32.4k5.7k

• charles2gan/GDA-android-reversing-Tool

  the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

  Language:Java4.2k525

• ewilded/psychoPATH

  psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-searching payload generator, LFI mode, nix & windows support, single byte generator, payload export.

  Language:Java27092

• pwntester/ysoserial.net

  Deserialization payload generator for a variety of .NET formatters

  Language:C#3.2k469

• TROUBLE-1/Type-juggling

  Lab that will help you to understand how type juggling vulnerability works.

  Language:PHP226

• wireghoul/graudit

  grep rough audit - source code auditing tool

  Language:Shell1.5k244

• swisskyrepo/PayloadsAllTheThings

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Language:Python61.1k14.6k

• 0wa1s/broken.net

  Language:JavaScript63

• byt3bl33d3r/CrackMapExec

  A swiss army knife for pentesting networks

  Language:Python8.4k1.6k

• JGillam/SerPHPer

  Serialized PHP toolkit for Burp Suite

  Language:Java84

• Coalfire-Research/Slackor

  A Golang implant that uses Slack as a command and control server

  Language:Python458107

• steverobbins/magescan

  Scan a Magento site for information

  Language:PHP438110

• rebootuser/LinEnum

  Scripted Local Linux Enumeration & Privilege Escalation Checks

  Language:Shell7k2k

• Mr-Un1k0d3r/SPFAbuse

  SPF are not as strong as you may think. Red Team tool to send email on behalf of your target corp

  Language:Python13331

• OlivierLaflamme/Cheatsheet-God

  Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

  4.9k1.2k

• FuzzySecurity/Sharp-Suite

  Also known by Microsoft as Knifecoat :hot_pepper:

  Language:C#1.1k204

• infosecn1nja/AD-Attack-Defense

  Attack and defend active directory using modern post exploitation adversary tradecraft activity

  4.4k1k

• CSPF-Founder/ASPVulnerableLab

  Vulnerable ASP based Web Application

  Language:C#1818

• Ebryx/AES-Killer

  Burp Plugin to decrypt AES encrypted traffic on the fly

  Language:Java636120

• d3vilbug/HackBar

  HackBar plugin for Burpsuite

  Language:Java1.5k260