A powerful AWS Cognito analysis and session hijacking toolkit designed for security researchers and penetration testers. CognitoHunter specializes in dissecting AWS Cognito implementations and performing advanced credential-to-session conversions.
☆21Jan 20, 2025Updated last year
Alternatives and similar repositories for Cognitohunter
Users that are interested in Cognitohunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- AI Substitutor is an extension for Burp Suite that uses AI functionality to substitute values of HTTP request parameters and headers.☆29Apr 30, 2025Updated last year
- An Evil OIDC Server☆53Oct 19, 2022Updated 4 years ago
- ☆28Mar 11, 2025Updated last year
- A tool for adding new lines to files, skipping duplicates and written in Rust!☆22May 8, 2025Updated last year
- Advanced test for proxy & waf☆13Feb 10, 2026Updated 8 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Tool to scan servers and hosts using dynamic paths.☆22Oct 1, 2025Updated last year
- Looks for parameters in urls☆35Oct 14, 2024Updated 2 years ago
- Signatures for wraith used to detect secrets across various sources☆15Jul 8, 2022Updated 4 years ago
- Automated JavaScript Debugging Tool using CDP - Automatically sets breakpoints for specified strings/patterns in JavaScript code☆94Dec 22, 2024Updated last year
- CSS injection requires an attacker to load a standalone CSS file to leak HTML tag attributes.☆21Apr 19, 2024Updated 2 years ago
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆41Dec 12, 2023Updated 2 years ago
- A collection of published exploits and proof-of-concept code.☆20Dec 19, 2017Updated 8 years ago
- Tool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used …☆257Dec 9, 2025Updated 10 months ago
- Invanti VPN Vulnerabilities for Jan - Feb 2024 - Links to Keep it all Organized☆16Feb 15, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- tool that generates bypasses for open redirects☆49Apr 18, 2022Updated 4 years ago
- demo unhooking functions in ntdll☆28Jul 15, 2025Updated last year
- Tool to fuzz for interesting vhost.☆23Jan 8, 2025Updated last year
- Precompiled binaries for various projects☆13Nov 6, 2020Updated 5 years ago
- Some scripts to enumerate and attack Jenkins servers☆12Feb 1, 2024Updated 2 years ago
- Repository aimed at helping to perform pentests on flutter applications☆19Jul 10, 2024Updated 2 years ago
- Will share some interesting writeups here :)☆18Oct 18, 2023Updated 3 years ago
- Custom Amsi Bypass by patching AmsiOpenSession function in amsi.dll☆54Jun 16, 2025Updated last year
- Raigeki is a Rust-based shellcode loader that writes memory via APCs using NtQueueApcThread and RtlFillMemory.☆10Jul 1, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A rapid HTTP downgrade smuggling scanner written in Go.☆312May 16, 2024Updated 2 years ago
- Generate a cross join, also known as a Cartesian product, from the lines of the specified files. This process is useful for creating fuzz…☆21Jun 29, 2023Updated 3 years ago
- A bash script that automates the scanning of a target network for HTTP resources through XXE☆38Dec 2, 2020Updated 5 years ago
- yataf extracts secrets and paths from files or urls - its best used against javascript files☆54Sep 11, 2024Updated 2 years ago
- ☆21Nov 6, 2024Updated last year
- How to dump lsass via spoolsv with DLL side-loading.☆14Nov 29, 2025Updated 11 months ago
- ☆40Aug 2, 2024Updated 2 years ago
- Offensive Kubernetes Threat Matrix -- kubenomicon.com☆54Apr 1, 2026Updated 7 months ago
- This changes the style of Burp Suite's Repeater tabs to help the testers☆29Jul 3, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Simple tool to test for SSRF/OOB HTTP Read within the Path of a request☆30Aug 2, 2019Updated 7 years ago
- navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities☆75May 20, 2023Updated 3 years ago
- Simple fork from degoogle original project with bug hunting purposes☆90Jun 15, 2022Updated 4 years ago
- The Swiss army knife of evasion tool that bypasses AMSI, Applocker, and CLM mode simultaneously.☆29Mar 9, 2024Updated 2 years ago
- Utility for creating ZipSlip archives☆98Feb 9, 2023Updated 3 years ago
- Archive Alchemist is a tool for creating specially crafted archives to test extraction vulnerabilities.☆243Jul 24, 2025Updated last year
- Shodan-Grabber is a Node.js tool for scraping IP addresses and other information from Shodan's web interface. It utilizes Puppeteer for w…☆18Nov 13, 2024Updated last year