fastfuz-chrome-ext

FastFuzz Chrome 扩展 使用 Chrome 扩展快速模糊测试网站 截图 安装 添加自定义文件 打开 files.txt 逐行粘贴你的文件或目录名称 快乐狩猎 待办事项 添加响应大小发现 添加新的特定文件和目录名称 将扩展添加到 Chrome 扩展商店...

ghidra-nanomips

ghidra-nanomips Módulo nanoMIPS para Ghidra. Configuración Compilación $ ./gradlew -PGHIDRAINSTALLDIR=/opt/ghidra11.0.3 Instalación La tarea de compilación de Gradle crea un archivo ZIP en el directorio dist. Instálelo con File Install Extensions en la ventana principal del proyecto Ghidra...

JS-Tap

JS-Tap v3.0.4 This tool is intended to be used on systems you are authorized to attack and for legal and educational purposes. Do not use this tool for illegal purposes, or I will be very angry in your general direction. Changelogs Major changes are documented in the project Announcements:...

SqlMap_BurpSuite

SqlMapBurpSuite Compiled sqlmap.jar https://github.com/jas502n/SqlMapBurpSuite/blob/master/burpsqlmap/out/artifacts/burpsqlmapjar/burpsqlmap.jar grep -r "send to Sqlmap" src/burp/SnifferContextMenuFactory.java: JMenuItem jMenuItem = new JMenuItem"send to Sqlmap"; JMenuItem jMenuItem = new...

Airachnid-Burp-Extension

Web Cache Deception Burp Extension A Burp extension to test applications for vulnerability to the Web Cache Deception attack. Once the extension has been loaded, it can be accessed in the Target - Sitemap tab and right click on the resource that should be tested. A context sensitive menu item...

zeek-spicy-openvpn

zeek-spicy-openvpn Este es un analizador de protocolos que detecta tráfico OpenVPN. Debes instalar Spicy para usar este paquete. Blogs y seminarios web que detallan el desarrollo de este analizador de protocolos: https://zeek.org/2021/03/16/a-zeek-openvpn-protocol-analyzer/...

CVE-2024-9264-RCE-Exploit

CVE-2024-9264-RCE-Exploit in Grafana via SQL Expressions Description Proof Of Concept for Remote Code Execution in Grafana CVE-2024-9264 This repository contains a Python script that exploits a Remote Code Execution RCE vulnerability in Grafana's SQL Expressions feature. By leveraging insufficien...

PublicSafe

PublicSafe Your Browser, Your Safe Space PublicSafe is a free and open-source browser extension focused on privacy, encryption, and user control. It provides client-side encryption tools designed to help users protect sensitive information before it leaves their browser. PublicSafe is built aroun...

WPintel

Features • Installation • Use • License • Download Video Demonstration Features Detect WordPress version Detect version vulnerabilities Enumerate Users Detect Themes Detect Plugins Find full path disclosure Check user registration status Installation Google chrome users can download WPintel from...

ret-sync

ret-sync ret-sync 代表逆向工程工具同步（Reverse-Engineering Tools SYNChronization）。它是一组插件，用于将调试会话（WinDbg/GDB/LLDB/OllyDbg/OllyDbg2/x64dbg）与反汇编器（IDA/Ghidra/Binary Ninja）同步。其核心理念很简单：从静态分析和动态分析两个世界中各取所长。 调试器和动态分析为我们提供： 局部视图，具有实时动态上下文（寄存器、内存等） 内置的特殊功能/API（例如：WinDbg 的 !peb、!drvobj、!address 等） 反汇编器和静态分析为我们提供：...

XWiki Platform Distribution Flavor Main - Cross-Site Scripting

XWiki Platform Distribution Flavor Main versions prior to 17.6.0 are vulnerable to reflected cross-site scripting XSS due to improper sanitization of user-supplied input in the extensionId parameter. An attacker can exploit this issue by injecting malicious JavaScript, which will be executed in t...

Lightdash version <= 0.510.3 Arbitrary File Read

packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intended file extension .csv or .png is used. id: CVE-2023-35844 info: name: Lightdash version = 0.510.3 Arbitrary File Read author: dwisiswant0...

Suprema BioStar <2.8.2 - Local File Inclusion

Suprema BioStar before 2.8.2 Video Extension allows remote attackers can read arbitrary files from the server via local file inclusion. id: CVE-2020-15050 info: name: Suprema BioStar 2.8.2 - Local File Inclusion author: gy741 severity: high description: Suprema BioStar before 2.8.2 Video Extensio...

Joomla! JCE extension < 2.9.99.5 unauthenticated RCE

Joomla JCE editor extension contains an unrestricted file upload vulnerability caused by allowing unauthenticated users to create new editor profiles, letting attackers upload and execute PHP code remotely, exploit requires no authentication. id: CVE-2026-48907 info: name: Joomla! JCE extension...

GraphQLGrapper

An extension to collect GraphQL functions from Burpsuite requests history How to use You need will need Jython standalone jar 1. Go to Extensions tab 2. Click on Add 3. Choose GraphQLGrapper.py 4. Now you can use it by right click on the target and choosing the extension Result...

Needle

Needle Chrome扩展，一键访问你在各大平台的漏洞赏金提交面板 + 公开披露报告 + bugbountytip Needle是你唯一需要的Chrome扩展，只需一键即可访问你在各大平台的漏洞提交信息。 无需创建书签、无需在地址栏输入网址、也无需处理自动补全的麻烦。 目前包含的列表如下： 1. Hackerone 2. Bugcrowd 3. Intigriti 4. Yes we hack 以及附加功能： 1. H1公开披露报告（来自 h1.nobbd.de） 2. bugbountytips 链接（通过 @TheBugBot） 截图-...

save-telegram-chat-history

Save Telegram Chat History Why this extension? Perhaps, many of us like Telegram messenger and use it for conversations with friends. However, we were a bit disappointed by the absence of any sort of easy-accessible "Save Conversation" feature in the messenger. Therefore, we've written a Chrome...

burp-radamsa

burp-radamsa Radamsa fuzzer extension for Burp Suite http://raz0r.name/releases/burp-radamsa...

ReconAIzer

ReconAIzer ReconAIzer is a powerful Jython extension for Burp Suite that leverages OpenAI to help bug bounty hunters optimize their recon process. This extension automates various tasks, making it easier and faster for security researchers to identify and exploit vulnerabilities. Once installed,...

403Kangaroo

403Kangaroo !! This tool is still under development if you have any issues please don't hesitate to contact me via linkedin or smth 403/401 bypass tool via certain headers and values headers.txt,values.txt. When you load the extension for the first time it will open a headers.txt file and write t...