D35m0nd142 / Kadabra
[DEPRECATED] Kadabra is my automatic LFI Exploiter and Scanner, written in C++ and a couple extern module in Python.
☆33Updated 5 years ago
Alternatives and similar repositories for Kadabra:
Users that are interested in Kadabra are comparing it to the libraries listed below
- An adaptive, intelligent XSS fuzzer that learns how the response is reflected and carefully crafts an XSS payload to match☆42Updated 12 years ago
- Async'ly gather unique usernames thru null SMB sessions and bruteforce them with 2 passwords☆51Updated 7 years ago
- ☆15Updated 2 years ago
- Discovers and exploits hosts vulnerable to MS08-067/MS17-010☆41Updated 6 years ago
- A collection of Nmap NSE scripts that I made.☆27Updated 12 years ago
- Various tools for managing bug bounty recon and exploration.☆47Updated 2 years ago
- Interactive Post Exploitation Tool☆36Updated 5 years ago
- patched information leak leaking full names associated with some email addresses including but not limited to gmail☆36Updated 3 years ago
- Modified version of ActiveScan++ Burp Suite extension☆31Updated 8 years ago
- This script generate backdoor code which log username password of an user who have passed HTTP basic auth using LDAP credentials.☆58Updated 7 years ago
- Firework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process.☆44Updated 4 years ago
- A CRLF ( Carriage Return Line Feed ) Injection attack occurs when a user manages to submit a CRLF into an application. This is most commo…☆47Updated 2 years ago
- a collection of payloads for common webapps☆73Updated 11 years ago
- ☆47Updated 9 years ago
- Just a silly recon tool that uses data from SSL Certificates to find potential host names☆30Updated last year
- Listing subdomains about a main domain☆58Updated 6 years ago
- Generic Command Exploitation Engine for exploiting web application command-injection bugs,.☆31Updated 11 years ago
- Cross-Site-Scripting (XSS) Automatic Scanner☆43Updated 4 years ago
- OWASP Skanda - SSRF Exploitation Framework☆37Updated 11 years ago
- A Burp Suite content discovery plugin that add the smart into the Buster!☆31Updated 7 years ago
- Scan for open S3 buckets and dump☆36Updated 6 years ago
- Fingerprint a web app using local files as the fingerprint sources☆38Updated 7 years ago
- Slides of the talk on Injection attacks in apps with NoSQL Backends, given at null OWASP Bangalore monthly meet on 27th April 2019☆22Updated 5 years ago
- Disrupt WAF by abusing SSL/TLS Ciphers☆48Updated 6 years ago
- Burp Intruder File Payload Generator☆18Updated 5 years ago
- Enumerate subdomains through Virustotal☆32Updated 5 years ago
- Collection of scripts that aid in penetration testing of JSON Web Tokens☆58Updated 5 years ago
- Strutsy - Mass exploitation of Apache Struts (CVE-2017-5638) vulnerability☆10Updated 6 years ago
- SA-CORE-2018-004 POC #drupalgeddon3☆42Updated 6 years ago
- A WebDAV PROPFIND covert channel to deliver payloads☆53Updated 7 years ago