privacytests

PrivacyTests PrivacyTests es un programa de pruebas de código abierto que mide las características de privacidad de los navegadores, y un sitio web, https://privacytests.org, que muestra los resultados para consumo humano. PrivacyTests utiliza la licencia MIT. aioquic: un submódulo con un fork de...

awesome-hacker-search-engines

Awesome Hacker Search Engines A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more General • Servers • Vulnerabilities • Exploits • Attack surface • Code • Email addresses • Domains • URLs • DNS •...

hacks

/\ /\ \ /\ \ /\ /\ \ /:// /::\ \ /::\ \ /:/ / /::\ \ /::/\ /:::\ /:/:\ /::-"\ /::\ /::/ / /::/ / :\ // ;:;-",-" ::// /:/ / /:/ / :\ |:| | ::/ / // // // || // Some random scripts. Just trying to be like the cool kids. Place all the scripts under /usr/local/bin and hack...

Zerodoor

ZeroDoor A script written lazily for generating reverse shell backdoors on the go whenever you need without any hassle for your daily penetration needs . These backdoors are not james bond high tech stuff but rather simple ones to prevent over exploitation and limited capabilities Once you genera...

Minio-CVE-2023-28432

Minio-CVE-2023-28432 用于Minio-CVE-2023-28432信息泄露的检测工具。仅用于学习和授权测试目的。 个人分析https://lhxhl.github.io/2023/04/03/minio2023/ 使用方法 需要golang语言环境 go build main.go ./main -h //使用帮助 ./main -u url //单个url检测 ./main -f file.txt //批量检测 错误信息会写入err.txt，批量检测，成功的结果会报存在result.txt image-20230406203902567...

DetectionLab

Detection Lab As of 2023-01-01, DetectionLab is no longer being actively maintained DetectionLab is tested weekly on Saturdays via a scheduled CircleCI workflow to ensure that builds are passing. Purpose This lab has been designed with defenders in mind. Its primary purpose is to allow the user t...

FUSE

FUSE FUSE is a penetration testing system designed to identify Unrestricted Executable File Upload UEFU vulnerabilities. The details of the testing strategy is in our paper, "FUSE: Finding File Upload Bugs via Penetration Testing", which appeared in NDSS 2020. To see how to configure and execute...

linux_screenshot_xwindows

Intro The goal of this volatility plugin is to extract a screenshot of all open X windows from a memory dump. Previous work The volatility plugin linuxxwindows realised by Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extracts various metadata from the window objects registered to X...

waf-bypass

WAF Bypass Tool WAF Bypass Tool 是一个开源工具，用于使用预定义和可自定义的载荷分析任何 WAF 的误报和漏报安全性。在攻击者之前检查您的 WAF。WAF Bypass Tool 由 Nemesida WAF 团队在社区参与下开发。 请勿进行任何非法行为 禁止用于非法和不道德的目的。不要违法。我们对使用本软件可能产生的风险不承担任何责任。 如何运行 使用 Docker 运行 最新版本的 waf-bypass 始终可通过 Docker Hub 获取。可通过以下命令轻松拉取： docker pull nemesida/waf-bypass docker run...

HatCloud

HatCloud - discontinued HatCloud build in Ruby. It makes bypass in CloudFlare for discover real IP. This can be useful if you need test your server and website. Testing your protection against Ddos Denial of Service or Dos. CloudFlare is services and distributed domain name server services, sitti...

syd

Syd Offline AI assistant for penetration testing. Paste your tool output, ask questions in plain English, get answers grounded in your actual data. No internet connection, no API keys, nothing leaves the machine. Runs entirely on CPU. Tested on standard laptop hardware. What it supports Nmap — XM...

SimplesApachePathTraversal

SimplesApachePathTraversal Simples Apache 路径遍历 这是一个用于测试 Apache 路径遍历漏洞的简单工具 https://blog.mrcl0wn.com/2021/10/uma-simples-tool-para-apache-path.html Autor: MrCl0wn Blog: https://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitter: https://twitter.com/MrCl0wnLab Email:...

JustTryHarder

JustTryHarder JustTryHarder is a cheat sheet which will aid you through the PWK course & the OSCP Exam. Inspired by PayloadAllTheThings Feel free to submit a Pull Request & leave a star to share some love if this helped you. 💖 Hacktoberfest friendly! Yes, we are open to Pull Requests for...

codeql

CodeQL This open source repository contains the standard CodeQL libraries and queries that power GitHub Advanced Security and the other application security products that GitHub makes available to its customers worldwide. How do I learn CodeQL and run queries? There is extensive documentation abo...

Linux-for-a-Pentester

🐧 Linux for a Pentester 💀 "Theory is great, but the shell is where the magic happens." This repository is a curated collection of Linux command notes built from real-world labs, CTFs, and hands-on practice. No fluff, just the raw commands and practical notes needed for a Pentester. 📂 Repository...

jok3r

.. raw:: html .. image:: ./pictures/logo.png .. raw:: html .. image:: https://img.shields.io/badge/python-3.6-blue.svg :target: https://www.python.org/downloads/release/python-366/ :alt: Python 3.6 .. image:: https://readthedocs.org/projects/jok3r/badge/?version=latest :target:...

Firefox-Security-Toolkit

Firefox Security Toolkit A tool that transforms Firefox browsers into a penetration testing suite How? It downloads the most important extensions, and install it on your browser. The used extensions has been chosen by a survey among the information security community. Based on it's results, Firef...

jmxbf

jmxbf - A brute force program to test weak accounts configured to access a JMX Registry Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniele Costa, daniele dot costa at nccgroup dot trust http://www.github.com/nccgroup/jmxbf Released under AGPL see LICENSE for...

sdnpwn

sdnpwn 是什么？ sdnpwn 是一个用于测试软件定义网络（SDN）安全性的工具包和框架。更多信息请查看这篇文章：https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ 安装 首先使用 git 下载 sdnpwn git clone https://github.com/smythtech/sdnpwn 使 sdnpwn.py 和 setup.sh 脚本可执行 sudo chmod +x sdnpwn.py sudo chmod +x setup.sh setup.sh 脚本负责安装 sdnpwn 运行所需的软件。只需运行 ./setup.sh...

sdnpwn

What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git git clone https://github.com/smythtech/sdnpwn Make...