-
PaddingOracleHunter Public
Forked from GovTech-CSG/PaddingOracleHunterPython MIT License UpdatedJul 12, 2024 -
vulnerable-node-app Public
Forked from Charlie-belmer/vulnerable-node-appA NoSQL Injectable Node App
-
privatecollaborator Public
Forked from putsi/privatecollaboratorA script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate
-
BurpSuiteSharpenerEx Public
This extension enhances Burp Suite by adding several UI and functional features, making it more user-friendly.
-
dnschef_updated Public
Forked from iphelix/dnschefDNSChef - DNS proxy for Penetration Testers and Malware Analysts
-
JNDI-Exploit-Kit Public
Forked from pimps/JNDI-Exploit-KitJNDI-Exploitation-Kit(A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps v…
Java MIT License UpdatedNov 28, 2023 -
-
BChecks Public
Forked from PortSwigger/BChecksBChecks collection for Burp Suite Professional
-
h2csmuggler Public
Forked from riramar/h2csmugglerHTTP Request Smuggling over HTTP/2 Cleartext (h2c)
Python MIT License UpdatedNov 9, 2023 -
ysoserial.net Public
Forked from pwntester/ysoserial.netDeserialization payload generator for a variety of .NET formatters
-
BlazorTrafficProcessor Public
Forked from R4ML1N/BlazorTrafficProcessor -
-
lightning-burp Public
Forked from salesforce/lightning-burpJava BSD 3-Clause "New" or "Revised" License UpdatedSep 23, 2023 -
release-action Public
Forked from hackvertor/release-actionAn action which manages a github release
TypeScript MIT License UpdatedSep 18, 2023 -
delete-older-releases Public
Forked from dev-drprasad/delete-older-releasesGithub Action to delete older releases
JavaScript MIT License UpdatedSep 4, 2023 -
-
IIS-ShortName-Scanner Public
latest version of scanners for IIS short filename (8.3) disclosure vulnerability
-
-
-
DEFCON-31-Syscalls-Workshop Public
Forked from VirtualAlllocEx/DEFCON-31-Syscalls-WorkshopContains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".
C UpdatedAug 12, 2023 -
check_mdi Public
Forked from expl0itabl3/check_mdiPython script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for an MDI instance.
Python UpdatedJul 27, 2023 -
clairvoyance Public
Forked from nikitastupin/clairvoyanceObtain GraphQL API schema even if the introspection is disabled
Python Apache License 2.0 UpdatedJul 10, 2023 -
shortscan Public
Forked from bitquark/shortscanAn IIS short filename enumeration tool
-
JDBC-Attack Public
Forked from su18/JDBC-AttackJDBC Connection URL Attack
-
A Burp Suite Extension Template Which Uses Java
Java GNU Affero General Public License v3.0 UpdatedJul 5, 2023 -
Burp-Suite-Extender-Montoya-Course Public
Forked from federicodotta/Burp-Suite-Extender-Montoya-CourseThis repository contains all the examples related to a series of tutorials that demonstrate how to use the new Montoya API of Burp Suite to create extensions that will greatly simplify our penteste…
Java MIT License UpdatedJul 2, 2023 -
nosqlilab Public
Forked from digininja/nosqlilabA lab for playing with NoSQL Injection
PHP UpdatedJun 20, 2023 -
afrog Public
Forked from zan8in/afrogA Security Tool for Bug Bounty, Pentest and Red Teaming.
-
trufflehog Public
Forked from trufflesecurity/trufflehogFind and verify credentials
-
xpoc Public
Forked from chaitin/xpoc为供应链漏洞扫描设计的快速应急响应工具 [快速应急] [漏洞扫描] [端口扫描] [xray2.0进行时] A fast emergency response tool designed for supply chain vulnerability scanning.
Other UpdatedJun 16, 2023