ipk1 Goto Github PK

iis_exploit

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.

inception

A highly configurable Framework for easy automated web scanning

infosec_reference

Information Security Reference That Doesn't Suck

intigritiscopedownload

downloads all the URL's in scope for a user, private and public

inventory

Asset inventory on public bug bounty programs.

ipobfuscator

A simple tool to convert the IP to a DWORD IP

ipv6-dns

Using this host, you can access to google, youtube, facebook in China Mainland

jaeles

The Swiss Army knife for automated Web Application Testing

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

javaunserializeexploits

java_deserialization_exploits

A collection of Java Deserialization Exploits

jawfish

Tool for breaking into web applications.

jenkins-decrypt

Credentials dumper for Jenkins

joomla-components-exploits-auto-updating-scanner

Auto Updater Joomla Components and Exploits Scanner

jsa

Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

jsfscan.sh

Automation for javascript recon in bug bounty.

jsscanner

You can read the writeup on this script here

jwtxploiter

A tool to test security of json web token

kali-setup

Script for Kali that adds a bunch of tools and customizes it to be much better

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

krishna.github.io

ksubdomain

无状态子域名爆破工具

kube-scan

Kubernetes Scanner

kubernetes-rbac-audit

Tool for auditing RBACs in Kubernetes

kubestriker

A Blazing fast Security Auditing tool for Kubernetes

kubiscan

A tool to scan Kubernetes cluster for risky permissions

lambdaguard

AWS Serverless Security

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

lfisuite

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner