gquere / pwn_jenkins
Notes about attacking Jenkins servers
☆2,047Updated 9 months ago
Alternatives and similar repositories for pwn_jenkins:
Users that are interested in pwn_jenkins are comparing it to the libraries listed below
- Automatic SSRF fuzzer and exploitation tool☆3,159Updated last month
- A curated list of amazingly awesome Burp Extensions☆3,143Updated 2 months ago
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,720Updated 11 months ago
- Rockyou for web fuzzing☆2,774Updated last month
- A tool to perform Kerberos pre-auth bruteforcing☆2,867Updated 8 months ago
- SSRF (Server Side Request Forgery) testing resources☆2,396Updated 6 months ago
- XSS payloads designed to turn alert(1) into P1☆1,360Updated last year
- Red Teaming & Pentesting checklists for various engagements☆2,532Updated 8 months ago
- linuxprivchecker.py -- a Linux Privilege Escalation Check Script☆1,642Updated 3 years ago
- Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner☆1,798Updated 3 years ago
- ☆2,256Updated last year
- Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3☆1,940Updated last year
- This script is intended to automate your reconnaissance process in an organized fashion☆1,958Updated 3 years ago
- A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, al…☆2,151Updated 2 years ago
- Windows / Linux Local Privilege Escalation Workshop☆1,936Updated 2 years ago
- Linux enumeration tool for pentesting and CTFs with verbosity levels☆3,569Updated last year
- pwning IPv4 via IPv6☆1,775Updated last year
- 🎯 XML External Entity (XXE) Injection Payload List☆1,167Updated 9 months ago
- A python script that finds endpoints in JavaScript files☆3,901Updated last year
- A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specifi…☆2,297Updated 3 months ago
- A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for secu…☆1,298Updated last week
- File upload vulnerability scanner and exploitation tool.☆3,190Updated 2 years ago
- A script that you can run in the background!☆2,832Updated 8 months ago
- HTTP parameter discovery suite.☆5,568Updated 2 months ago
- A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and…☆3,779Updated 3 years ago
- JAWS - Just Another Windows (Enum) Script☆1,763Updated 4 years ago
- Subdomain Takeover tool written in Go☆1,959Updated last year
- "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.☆5,115Updated 2 months ago
- Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.☆1,794Updated 6 months ago
- This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage clou…☆2,675Updated 7 months ago