Scripts to execute enumeration via LFI
☆92Apr 8, 2019Updated 7 years ago
Alternatives and similar repositories for LFI-Enum
Users that are interested in LFI-Enum are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Python3 script to parse txt files containing Mimikatz output☆100Jun 19, 2020Updated 6 years ago
- Powershell module to get the NetNTLMv2 hash of the current user☆98Jul 5, 2022Updated 4 years ago
- Full Antivirus Evasion for Mimikatz☆14Mar 10, 2017Updated 9 years ago
- take a list of resolved subdomains and output any corresponding CNAMES en masse.☆18Sep 29, 2026Updated last month
- ☆16May 3, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- For OSCP !☆10Nov 7, 2019Updated 6 years ago
- Feed the tool a .nessus file and it will automatically get you MSF shell☆238Dec 8, 2022Updated 3 years ago
- sub domain wild card filtering tool☆39Apr 18, 2020Updated 6 years ago
- SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing☆91May 10, 2020Updated 6 years ago
- ☆14Jul 13, 2020Updated 6 years ago
- Red Teaming Experiments / Offensive Security / OSCP & Pentesting Cheat Sheets and more☆18Jan 11, 2019Updated 7 years ago
- Scan for and exploit Consul agents☆39Jun 11, 2019Updated 7 years ago
- XXRF Shots - Useful for testing SSRF vulnerability☆75Feb 18, 2023Updated 3 years ago
- Dashboarding and Tooling front-end for PowerShell Empire using PowerShell Universal Dashboard☆104Apr 19, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Collection of scripts for interacting with AD Kerberos from Linux☆72Apr 22, 2018Updated 8 years ago
- ☆20Oct 5, 2020Updated 6 years ago
- ☆19Mar 16, 2021Updated 5 years ago
- CVE-2023-20052, information leak vulnerability in the DMG file parser of ClamAV☆29May 8, 2023Updated 3 years ago
- Hacked together script for feeding urls into Burp's Sitemap☆95Jul 30, 2026Updated 3 months ago
- linikatz is a tool to attack AD on UNIX☆627May 30, 2026Updated 5 months ago
- BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities☆122May 12, 2026Updated 5 months ago
- Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of rel…☆426Oct 19, 2026Updated 2 weeks ago
- Proof Of Concept code for OctoberCMS Auth Bypass CVE-2021-32648☆12Jan 14, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This repository holds interesting bits and pieces related to research I performed on wireless presentation devices manufactured by Awindi…☆14May 28, 2021Updated 5 years ago
- Messy BurpSuite plugin for SQL Truncation vulnerabilities.☆62Apr 17, 2020Updated 6 years ago
- Checks using a test string if a Cloudflare DNS bypass is possible using CloudFail.☆48Dec 17, 2020Updated 5 years ago
- Pre-auth RCE PoC for WordPress core — chains CVE-2026-63030 (REST /batch/v1 route-confusion desync) with CVE-2026-60137 (author__not_in S…☆17Jul 22, 2026Updated 3 months ago
- Auto Recon Bash Script☆31Dec 31, 2024Updated last year
- unix SSH post-exploitation 1337 tool☆142Dec 16, 2018Updated 7 years ago
- A tool to find and exploit servers vulnerable to Shellshock☆327Apr 23, 2023Updated 3 years ago
- An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR☆2,346Dec 6, 2023Updated 2 years ago
- This is a burp plugin that extracts keywords from response using regexes and test for reflected XSS on the target scope.☆75Nov 5, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Simple python script to check against hypothetical JWT vulnerability.☆51Nov 29, 2020Updated 5 years ago
- DeepSea Phishing Gear☆122Jul 20, 2020Updated 6 years ago
- Discover target social media profiles☆81Sep 26, 2022Updated 4 years ago
- Password Lists for penetration testing, sorted by language.☆13Nov 23, 2017Updated 8 years ago
- Burp extension to detect alias traversal via NGINX misconfiguration at scale.☆267Nov 18, 2021Updated 4 years ago
- URL-encode data streams via commandline☆14Oct 26, 2019Updated 7 years ago
- [Linux] Two Privilege Escalation techniques abusing sudo token☆734Apr 14, 2019Updated 7 years ago