MrW0l05zyn / pentestingLinks
Herramientas y utilidades de pentesting, ethical hacking y seguridad ofensiva.
☆41Updated 8 months ago
Alternatives and similar repositories for pentesting
Users that are interested in pentesting are comparing it to the libraries listed below
Sorting:
- SSTI Payload Generator☆92Updated 3 years ago
- Ghostscript command injection vulnerability PoC (CVE-2023-36664)☆130Updated 2 years ago
- Ad hoc collection of Red Teaming & Active Directory tooling.☆226Updated 2 years ago
- Python exploit code for CVE-2021-4034 (pwnkit)☆170Updated 4 years ago
- RCE exploit for dompdf☆181Updated 3 years ago
- Python tool for enumerating directories and files on web servers that contain a publicly readable .ds_store file.☆69Updated 4 years ago
- Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473☆111Updated last year
- Exploit for CVE-2021-3129☆68Updated 4 years ago
- Enumerate / Dump Docker Registry☆181Updated last year
- Aspx reverse shell☆119Updated 6 years ago
- Dockerized labs For Web Expert (OSWE) certification. Preparation for coming AWAE Training ...☆123Updated 4 years ago
- Local File Inclusion discovery and exploitation tool☆333Updated last year
- CVE Collection of jQuery UI XSS Payloads☆121Updated 3 years ago
- Collection of username lists for enumerating kerberos domain users☆106Updated 8 years ago
- Openfire Console Authentication Bypass Vulnerability with RCE plugin☆55Updated last year
- Achieving a Reverse Shell Exploit for Apache ActiveMQ (CVE_2023-46604)☆123Updated 2 years ago
- ☆39Updated 2 years ago
- A simple NodeJS WebSocket WebApp vulnerable to blind SQL injection☆71Updated 4 years ago
- Gitbook: OSCP-Jewels☆12Updated 4 years ago
- Joomla! < 4.2.8 - Unauthenticated information disclosure☆92Updated 2 years ago
- A Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violati…☆394Updated last week
- SMTP user enumeration via VRFY, EXPN and RCPT with clever timeout, retry and reconnect functionality.☆164Updated last year
- A comprehensive guide/material for anyone looking to get into infosec or take the OSCP exam☆44Updated 7 years ago
- Privilege escalation with polkit - CVE-2021-3560☆124Updated 4 years ago
- POC for CVE-2021-41091☆65Updated 2 years ago
- This Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.☆246Updated 10 months ago
- GameOver(lay) Ubuntu Privilege Escalation☆132Updated 2 years ago
- A webshell plugin and interactive shell for pentesting a WordPress website.☆107Updated last week
- This repo is a PoC with to exploit CVE-2023-51467 and CVE-2023-49070 preauth RCE vulnerabilities found in Apache OFBiz.☆72Updated last year
- CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request …☆283Updated last year