nccgroup / cqLinks
☆116Updated 2 years ago
Alternatives and similar repositories for cq
Users that are interested in cq are comparing it to the libraries listed below
Sorting:
- Use the GCP testIamPermissions functionality to bruteforce and discover your permissions☆45Updated 7 months ago
- ☆94Updated last month
- A GraphQL enumeration and extraction tool☆134Updated 3 years ago
- Encode and Fuzz Custom Protobuf Messages in Burp Suite☆36Updated 10 months ago
- A curated list of argument injection vectors☆41Updated last year
- Enumerate AWS permissions and resources.☆71Updated 3 years ago
- An Evil OIDC Server☆54Updated 3 years ago
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Updated last year
- HardeningMeter is an open-source Python tool carefully designed to comprehensively assess the security hardening of binaries and systems.☆65Updated last year
- CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to …☆126Updated last year
- ☆94Updated 3 years ago
- HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand AWS resources enab…☆40Updated 3 years ago
- Upload files done during my research.☆169Updated last month
- Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, an…☆144Updated 2 years ago
- Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝☆141Updated 2 months ago
- CQ, a code security scanner☆100Updated last year
- GTFOArgs is a curated list of programs and their associated arguments that can be exploited to gain privileged access or execute arbitrar…☆140Updated 3 months ago
- ☆50Updated last year
- ☆114Updated 2 years ago
- ☆34Updated 2 years ago
- A modular tool to search for known vulnerabilities, exploits and more across various data sources☆75Updated this week
- Blogpost series showcasing interesting cloud - web app security bugs☆49Updated 2 years ago
- External Playbooks for Public Access☆41Updated 11 months ago
- Posts about different topics☆39Updated 5 months ago
- Simple PoC for demonstrating Race Conditions on Websockets☆55Updated 2 years ago
- This repository offers insights and a proof-of-concept tool to exploit two significant deserialization vulnerabilities in Inductive Autom…☆46Updated 2 years ago
- EC2StepShell is an AWS post-exploitation tool for getting high privileges reverse shells in public or private EC2 instances.☆68Updated last year
- Verizon Burp Extensions: AI Suite☆142Updated 9 months ago
- Command line fuzzer and bruteforcer 🌪 wfuzz for command☆94Updated 3 years ago
- A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.☆48Updated 2 years ago