GraphQLmap

GraphQLmap GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. Install Features and examples Dump a GraphQL schema Interact with a GraphQL endpoint Execute GraphQL queries Autocomplete queries GraphQL field fuzzing Example 1 - Bruteforce a character Examp...

SwiftBelt

SwiftBelt About SwiftBelt is a macOS enumerator inspired by @harmjoy's Windows-based Seatbelt enumeration tool. SwiftBelt does not utilize any command line utilities and instead uses Swift code leveraging the Cocoa Framework, Foundation libraries, OSAKit libraries, etc. to perform system...

FTPBuster

FTPBuster FTPBuster is a powerful command-line brute-forcing tool designed to brute-force FTP, SFTP, and explicit FTPS servers by performing dictionary-based attacks. It is intended for ethical hacking and penetration testing Features Brute-force support for FTP , SFTP , and explicit FTPS AUTH TL...

FOCA

FOCA Fingerprinting Organizations with Collected Archives FOCA is a tool used mainly to find metadata and hidden information in the documents it scans. These documents may be on web pages, and can be downloaded and analysed with FOCA. It is capable of analysing a wide variety of documents, with t...

EvilOSX

EvilOSX An evil RAT Remote Administration Tool for macOS / OS X. Marco Generator by Cedric Owens This project is no longer active Features Emulate a terminal instance Simple extendable module system No bot dependencies pure python Undetected by anti-virus OpenSSL AES-256 encrypted payloads...

HackBrowserData

HackBrowserData HackBrowserData is a command-line tool for decrypting and exporting browser data passwords, history, cookies, bookmarks, credit cards, download history, localStorage, sessionStorage and extensions from the browser. It supports the most popular Chromium-based browsers and Firefox o...

OneListForAll

OneListForAll Wordlists for web fuzzing: curated micro, categorized short/long, and combined final lists. What this repo generates onelistforallmicro.txt: curated list maintained manually. dict/short.txt: per-category curated wordlist small/quality sources. dict/long.txt: per-category comprehensi...

Findomain

Findomain The complete solution for domain recognition. Supports screenshotting, port scanning, importing data from other tools, subdomain monitoring, and more. Be alerted on your findings through services such as Discord, Slack, and Telegram. Multiple API Keys for sources and much more. Chat wit...

cnappgoat

!made-with-Gomade-with-go-img !GitHub Releaserelease-imgrelease !Go Report Cardgo-report-imggo-report !License: Apache-2.0license-imglicense !Maintainermaintainer-1 CNAPPgoat CNAPPgoat is a multi-cloud, vulnerable-by-design environment deployment tool – specifically engineered to facilitate...

Remote-Access-Trojan

Remote Access Trojan All responsibilities are at your own risk. Please use it only for research purposes...

CMSeeK

What is a CMS? A content management system CMS manages the creation and modification of digital content. It typically supports multiple users in a collaborative environment. Some noteable examples are: WordPress, Joomla, Drupal etc. Release History - Version 1.1.3 25-07-2020 - Version 1.1.2...

AFLplusplus

American Fuzzy Lop plus plus AFL++ Release version: 5.03c GitHub version: 5.04a Repository: https://github.com/AFLplusplus/AFLplusplus AFL++ is maintained by: Marc "van Hauser" Heuse [email protected] Dominik Maier [email protected] Andrea Fioraldi [email protected] Heiko "hexcoder...

CVE-2018-15473-Exploit

CVE-2018-15473-Exploit On August 15th, 2018, the following advisory was posted on the OSS-Security list: http://openwall.com/lists/oss-security/2018/08/15/5 The ShelIntel team decided to invest some time and write an exploit for this vulnerability. The exploit below has the following features:...

go-sherlock

go-sherlock go-sherlock is an implementation of sherlock written in Go with some changes for better performance and more accurate results. Provided by Skele's Choice. Skele's Choice, it's the best choice! Ask your bones! skele.company Inspiration, Reference, & Credits sherlock WhatsMyName Effecti...

identYwaf

identYwaf is an identification tool that can recognize web protection type i.e. WAF based on blind inference. Blind inference is being done by inspecting responses provoked by a set of predefined offensive non-destructive payloads, where those are used only to trigger the web protection system in...

Medusa

Welcome to Medusa 👉About Medusa The project is licensed under GPL.Free for non-commercial use. Due to the lack of front -end, the project restart time is unknown. If you can provide help, please submit the issue 中文文档 | EnglishDocumentation 💡Document http://medusa.ascotbe.com 📋Web Ver. installatio...

aws-inventory

Introduction This is a tool that tries to discover all AWS resources created in an account. AWS has many products a.k.a. services with new ones constantly being added and existing ones expanded with new features. The ecosystem allows users to piece together many different services to form a...

Needl

🚨 Needl is no longer maintained. If you need support or consultation for your privacy endeavours, drop me an e-mail [email protected] 🚨 Needl Take back your privacy. Lose yourself in the haystack. Your ISP is most likely tracking your browsing habits and selling them to marketing agencies...

dbeaver

DBeaver Free multi-platform database tool for developers, SQL programmers, database administrators and analysts. Has a lot of features including schema editor, SQL editor, data editor, AI integration, ER diagrams, data export/import/migration, SQL execution plans, database administration tools,...

CVE-2024-22024

CVE-2024-22024 Check for CVE-2024-22024 vulnerability in Ivanti Connect Secure !WARNING FOR EDUCATIONAL PURPOSE AND AUTHORIZED TESTING ONLY. Parameters -u or --targeturl: The target Ivanti Connect Secure ICS URL or file with list of URLs. -c or --attackerurl: The attacker URL generate one using...