Q2h1Cg / dnsbrute

Related projects: ⓘ

• zt2 / sqli-hunter
  SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.
  ☆424Updated 4 months ago
• ewilded / shelling
  SHELLING - a comprehensive OS command injection payload generator
  ☆437Updated 4 years ago
• codewatchorg / bypasswaf
  Add headers to all Burp requests to bypass some WAF products
  ☆328Updated 6 years ago
• ilmila / J2EEScan
  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…
  ☆642Updated 10 months ago
• nixawk / fuzzdb
  Web Fuzzing Discovery and Attack Pattern Database
  ☆110Updated 6 years ago
• jas502n / St2-057
  St2-057 Poc Example
  ☆313Updated 6 years ago
• joaomatosf / JavaDeserH2HC
  Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).
  ☆491Updated 2 years ago
• brianwrf / hackUtils
  It is a hack tool kit for pentest and web security research.
  ☆508Updated 3 years ago
• WangYihang / Webshell-Sniper
  Manage your website via terminal
  ☆420Updated 3 years ago
• toyakula / luna
  luna webscanner
  ☆285Updated 9 months ago
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆590Updated 3 years ago
• aipengjie / sensitivefilescan
  ☆182Updated last year
• fengxuangit / Fox-scan
  Fox-scan is a initiative and passive SQL Injection vulnerable Test tools.
  ☆404Updated 7 years ago
• nccgroup / CrossSiteContentHijacking
  Content hijacking proof-of-concept using Flash, PDF and Silverlight
  ☆379Updated 5 years ago
• Q2h1Cg / CMS-Exploit-Framework
  CMS Exploit Framework
  ☆191Updated 9 years ago
• TheTwitchy / xxer
  A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
  ☆509Updated 4 years ago
• CHYbeta / cmsPoc
  CMS渗透测试框架-A CMS Exploit Framework
  ☆582Updated 6 years ago
• sensepost / reDuh
  Create a TCP circuit through validly formed HTTP requests
  ☆342Updated 7 years ago
• Gifts / Rogue-MySql-Server
  Rogue MySql Server
  ☆465Updated 11 years ago
• SecWiki / office-exploits
  office-exploits Office漏洞集合 https://www.sec-wiki.com
  ☆424Updated 5 years ago
• LandGrey / abuse-ssl-bypass-waf
  Bypassing WAF by abusing SSL/TLS Ciphers
  ☆302Updated 3 years ago
• zer0yu / Berserker
  A list of useful payloads for Web Application Security and Pentest/CTF
  ☆287Updated last month
• orangetw / awesome-jenkins-rce-2019
  There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
  ☆603Updated 5 years ago
• nanshihui / PocCollect
  a plenty of poc based on python
  ☆293Updated 7 years ago
• pwntester / SerialKillerBypassGadgetCollection
  Collection of bypass gadgets to extend and wrap ysoserial payloads
  ☆349Updated 2 years ago
• Ridter / acefile
  POC of https://research.checkpoint.com/extracting-code-execution-from-winrar/
  ☆268Updated 5 years ago
• khalilbijjou / WAFNinja
  WAFNinja is a tool which contains two functions to attack Web Application Firewalls.
  ☆793Updated 6 years ago
• allyshka / Rogue-MySql-Server
  MySQL fake server for read files of connected clients
  ☆582Updated 7 years ago
• Ridter / Pentest
  tools
  ☆538Updated 5 years ago