d3vilbug / HackBar

Related projects: ⓘ

• tarunkant / Gopherus
  This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
  ☆2,806Updated last year
• cujanovic / SSRF-Testing
  SSRF (Server Side Request Forgery) testing resources
  ☆2,335Updated last year
• alphaSeclab / awesome-burp-suite
  Awesome Burp Suite Resources. 400+ open source Burp plugins, 400+ posts and videos.
  ☆998Updated 4 years ago
• enjoiz / XXEinjector
  Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
  ☆1,508Updated 4 years ago
• swisskyrepo / SSRFmap
  Automatic SSRF fuzzer and exploitation tool
  ☆2,937Updated 3 months ago
• 3gstudent / Pentest-and-Development-Tips
  A collection of pentest and development tips
  ☆1,101Updated 2 years ago
• gloxec / CrossC2
  generate CobaltStrike's cross-platform payload
  ☆2,240Updated 9 months ago
• 0xn0ne / weblogicScanner
  weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-201…
  ☆1,982Updated 9 months ago
• xl7dev / WebShell
  Webshell && Backdoor Collection
  ☆1,790Updated 4 years ago
• wagiro / BurpBounty
  Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…
  ☆1,657Updated 4 months ago
• joaomatosf / jexboss
  JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
  ☆2,407Updated 4 years ago
• zer0yu / Awesome-CobaltStrike
  List of Awesome CobaltStrike Resources
  ☆3,971Updated 11 months ago
• abatchy17 / WindowsExploits
  Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.
  ☆1,811Updated 4 years ago
• epinna / tplmap
  Server-Side Template Injection and Code Injection Detection and Exploitation Tool
  ☆3,739Updated 4 months ago
• knownsec / pocsuite3
  pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
  ☆3,619Updated 4 months ago
• fuzz-security / SuperWordlist
  ☆1,305Updated this week
• D35m0nd142 / LFISuite
  Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner
  ☆1,661Updated 2 years ago
• L-codes / Neo-reGeorg
  Neo-reGeorg is a project that seeks to aggressively refactor reGeorg
  ☆2,840Updated last week
• mm0r1 / exploits
  Pwn stuff.
  ☆1,754Updated 2 years ago
• Dliv3 / Venom
  Venom - A Multi-hop Proxy for Penetration Testers
  ☆1,985Updated 2 years ago
• PortSwigger / turbo-intruder
  Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.
  ☆1,459Updated this week
• m4ll0k / Atlas
  Quick SQLMap Tamper Suggester
  ☆1,329Updated 2 years ago
• ssl / ezXSS
  ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
  ☆1,866Updated this week
• irsdl / IIS-ShortName-Scanner
  latest version of scanners for IIS short filename (8.3) disclosure vulnerability
  ☆1,411Updated last year
• lijiejie / ds_store_exp
  A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.
  ☆1,502Updated last year
• RhinoSecurityLabs / CVEs
  A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.
  ☆791Updated 2 months ago
• chenjj / CORScanner
  🎯 Fast CORS misconfiguration vulnerabilities scanner
  ☆1,033Updated 2 years ago
• sensepost / reGeorg
  The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
  ☆2,994Updated 3 years ago
• stamparm / identYwaf
  Blind WAF identification tool
  ☆598Updated 2 months ago
• ohpe / juicy-potato
  A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts t…
  ☆2,385Updated 2 years ago