j4k0m Goto Github PK

1337-checker

Advanced Script with CSRF Bypass work with your email and password to check Pool or Check in places.

3dprint-lite-1.9.1.4-file-upload

Analysis of WordPress 3D Print Lite 1.9.1.4 - arbitrary file upload vulnerability.

42docs

Documentation on MiniLibX and curriculum projects

allaboutbugbounty

All about bug websites (bypasses, payloads, and etc)

api-to-shell

Exploiting API to Shell challenge from Pentesterlab serialize badge.

auto_42_projecter

A tool that will create 42 project files structure for you.

awesome-waf

🔥 Everything awesome about web-application firewalls (WAF).

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

born2beroot

This project aims to introduce you to the wonderful world of virtualization.

boxer

Auto scanning tool that will help you during playing on HackTheBox, TryHackMe...etc

cbc-mac

Exploitation of signature of non-fixed size messages with CBC-MAC challenge on Pentesterlab.

ctfs_setup

those are some ctfs that I made while learning !

cve-2016-10033

Remote Code Execution vulnerability in PHPMailer.

cve-2016-2098

Remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data.

cve-2018-0114

Exploitation of a vulnerability in Cisco's node-jose, a JavaScript library created to manage JWT.

cve-2018-11235

Auto malicious git repository creation to exploit CVE-2018-11235 a Remote Code Execution using Git Sub module.

cve-2018-18925

Exploitation of CVE-2018-18925 a Remote Code Execution against the Git self hosted tool: Gogs.

cve-2018-6574

Remote command execution in Golang go get command allows an attacker to gain code execution on a system by installing a malicious library.

cve-2019-5420

A vulnerability can allow an attacker to guess the automatically generated development mode secret token.

cve-2021-24499

Mass exploitation of CVE-2021-24499 unauthenticated upload leading to remote code execution in Workreap theme.

cve-2021-41773

Exploitation of CVE-2021-41773 a Directory Traversal in Apache 2.4.49.

dirty_snap

A script to generate malicious snap package.

discord-theory-i

My attempt to reverse the Discord nitro token generation function.

discordemojisstealer

Use emojis everywhere without having a nitro or steal other emojis to use them on your server.

em

filterbypass

Browser's XSS Filter Bypass Cheat Sheet

gatsby-portfolio-dev

A portfolio for developers

glimpse-into-web-penetration-testing

A glimpse into web penetration testing example, that I did me and @Edd13Mora in our free time, for beginners to have an idea about websec.

godkiller

Vulnerabilities you my miss during a penetration testing.

hack-the-box-oscp-preparation

Hack-the-Box-OSCP-Preparation