brahst Goto Github PK

31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

admin-scanner

This tool is design to find admin panel of any website by using custom wordlist or default wordlist easily and allow you to find admin panel trough a proxy server

ajpy

android-analysis

Getting Genymotion & Burpsuite setup for Android Mobile App Analysis

android-classyshark

Analyze any Android/Java based app or game

android-security-awesome

A collection of android security related resources

awesomexss

Awesome XSS stuff

bbrecon

Python library and CLI for the Bug Bounty Recon API

bug-bounty-toolz

BBT - Bug Bounty Tools

bugz-tools

A collection of tools I wrote for bug bounty or hacking and don't mind publishing it :smile:

burpsuite_403bypasser

Burpsuite Extension to bypass 403 restricted directory

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

cors-poc

cve

Gather and update all available and newest CVEs with their PoC.

cve-2019-18935

RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.

cve-2021-26855

CVE-2021-26855 exp

cve-2022-22963

CVE-2022-22963 PoC

dirb

Web Fuzzer

enumerationlist

This Repo contains wordlist for subdomain enumeration , php file path, html file path, and js file path

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

firefly

Firefly - Information-Gathering Tool For Phone Numbers.

fortigate

Extract Useful info from SSL VPN Directory Traversal Vulnerability (FG-IR-18-384)

gda-android-reversing-tool

GDA is a new fast and powerful decompiler for the APK, DEX, ODEX, OAT, JAR, AAR and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption and encryption etc.

ghostcat-cnvd-2020-10487

Ghostcat read file/code execute,CNVD-2020-10487(CVE-2020-1938)

gitgot

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

h2csmuggler

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

hacking-books

hunt