cmscardoso Goto Github PK

broken-link-checker

Find broken links, missing images, etc in your HTML.

bucket_api_heroku

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugbounty-scans

aquatone results for sites with bug bountys

bugbountydork

Bug Bounty Dork

bugcrowd-levelup-subdomain-enumeration

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

burp-indicatorsofvulnerability

Burp extension that checks application requests and responses for indicators of vulnerability or targets for attack

burpblh

Broken Link Hijacking Burp Extension

burpcrlfplugin

Another plugin for CRLF vulnerability detection

bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cat----intelligence-led-cyber-attack-taxonomy

Intelligence Led Cyber Attack Taxonomy, CAT

cc.py

Extracting URLs of a specific target based on the results of "commoncrawl.org"

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

certstream-python

Python library for connecting to CertStream

certstreammonitor

Monitor certificates generated for specific domain strings and associated, store data into sqlite3 database, alert you when sites come online.

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cleveridge-ip-spider

The Cleveridge IP Spider searches for open TCP ports of a single IP-address or an IP-range and returns the open ports with an indication of the service behind the open ports. When scanning a range of IP's it will run multiple threads at the same time to save time. In one scan procedure you will be able to scan a range of 256 IP's (xxx.xxx.xxx.0-255)

cleveridge-ssh-scanner

The Cleveridge SSH Scanner is a SSH Brute Force tool written in python. The tool tries to get access to machines (IPv4) on the SSH port (22). When the machines is accessible on port 22, the tool brute forces the ssh login with the most common default user names and passwords.

cleveridge-subdomain-scanner

The Cleveridge Subdomain Scanner finds subdomains of a given domain.

cleveridge-subdomain-scanner-gui

The Cleveridge Subdomain Scanner with graphical user interface, finds subdomains of a given domain. https://cleveridge.org

cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

clusterd

application server attack toolkit

codeza

This tool will scan all the URL's in the file and will provide Content-Length and Status-Code. Result will be saved in different files

components

An easier way to build applications with cloud services. –

ct-exposer

An OSINT tool that discovers sub-domains by searching Certificate Transparency logs

ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

cve-2019-8449

CVE-2019-8449 Exploit for Jira v2.1 - v8.3.4

d4rkxss

A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF