d7x Goto Github PK

.net

burp-suite-extensions

Burp Suite Extension Skeleton files & Custom Burp Suite Extensions I authored

cve-2020-12432

dependency_resolver

Dependency resolver is an application written in C which parses package dependencies from a .pms file which describes the dependencies in json format. I wrote it in 2016 as a task assignment for a job interview. In its current state it may or may not be of practical use but it can be easily modified. Feel free to use it or redistribute it as long as you keep the credits in the file and value my work as the original author.

json-payloads

JSON Deserialization payloads

misc

bash, pythons scripts etc.

nmap-tools

SpiderLabs shared Nmap Tools

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pyimagescraper

Scrape images from a provided url and save them to a local path (supports http auth)

pyrsacrack

PyRSACrack is a tool which cracks weak SSH credentials by provided authorized_keys file containing the public ssh keys. In case there are weak ssh credentials sharing a common GCD the script will generate a private key based on the public keys for the corresponding users automatically.

quick_chroot

A quick chroot script which might be used to recover grub or mount an existing linux installation to interact within the filesystem

reactxss

An XSS smoke test for ReactJS

searchsploitpkg

This script will take the results from a package list (like a package list from linuxprivchecker or windows' tasklist) and loop through searchsploit to find any relevant exploits for each package. The script will take the value before the first '-' (dash) or provided separator so you may wish to modify the more important packages like the linux kernel to avoid a broad search.

shellcode

smtp_relay_check

SMTP Open Relay Check script, written in Python

subdomaintakeover

synstats

Used to pull a summary CSV of an SRT's statistics on the Synack Red Team platform

udf_root

MySQL User-Defined function Dynamic Library Local Privilege Escalation

wfuzz

Web application fuzzer