M0x0101 / lol
☆12Updated this week
Related projects: ⓘ
- ☆18Updated last year
- FireHawk: The Elite Firebase Security Testing Utility☆19Updated 4 months ago
- ☆41Updated last year
- ☆29Updated this week
- Oneliner Bug Bounty Collection collected from GitHub to all bug bounty hunters☆27Updated 9 months ago
- DomainTrail is a fast subdomain enumeration tool that uses effective passive and active techniques.☆36Updated 5 months ago
- Drupalwned is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's critical…☆34Updated 8 months ago
- Help recon of hostnames from specific ASN or CIDR, thanks to Robtex and BGP.HE☆52Updated 7 months ago
- POC for CVE-2024-40348. Will attempt to read /etc/passwd from target☆28Updated 2 months ago
- A Lightning-Fast DNS Resolver written in Rust 🦀☆62Updated 4 months ago
- Run ffuf with the appropriate options to brute-force the directories using the awesome different wordlists.☆24Updated last year
- ☆47Updated 3 months ago
- A powerful bash script for massive XSS scanning leveraging Brute Logic's KNOXSS API☆56Updated 2 months ago
- A basic tool to check for XSS vulnerabilities. It takes a list of URLs and checks if the parameter values appear in the response.☆27Updated last month
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆41Updated 6 months ago
- A simple automation tool to detect lfi, rce and ssti vulnerability☆55Updated 2 years ago
- Recon scripts for Red Team and Web blackbox auditing☆29Updated 7 months ago
- Tips, Tricks, and Scripts for Linux Post Exploitation☆38Updated last year
- CVE-2024-28955 Exploitation PoC☆34Updated 2 months ago
- Python tool to test known techniques to bypass 403 and 401 HTTP responses.☆36Updated last year
- A proof of concept program that pulls and parses security.txt files at mass.☆26Updated last year
- This script reads a text file containing domains, fetches the subdomains from crt.sh☆10Updated last year
- Bypass Reset Password Code Lead to Account Takeover☆22Updated this week
- A simple bug bounty utility tool to remove uninteresting entries from a list of URLs.☆15Updated last month
- A tool for Subdomain takeovers detection☆26Updated last year
- xsschecker tool checking reflected endpoints finding possible xss vulnerable endpoints.☆19Updated last month
- Web Crawler for Identifying Entry Points☆12Updated 5 months ago
- This repository contains fully disclosed accepted reports for the null Ahmedabad's Bug Bounty CTF.☆10Updated 10 months ago
- WPXStrike is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's criticals…☆58Updated 8 months ago
- ☆26Updated last year