jongmartinez Goto Github PK

-cve-2017-9805-

Exploit script for Apache Struts2 REST Plugin XStream RCE (‎CVE-2017-9805)

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

appsecezine

AppSec Ezine Public Repository.

assessment-mindset

Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.

awesome-appsec

A curated list of resources for learning about application security

awesome-static-analysis

Static analysis tools for all programming languages

awesome-web-security

🐶 A curated list of Web Security materials and resources.

backtrader-binance-bot

:money_with_wings: A example of bot using Backtrader to trade Bitcoins in Binance Exchange.

bfc_lists

Compilation of lists for bruteforcing

bloodhound

Six Degrees of Domain Admin

brutespray

Brute-Forcing from Nmap output - Automatically attempts default creds on found services.

bt-ccxt-store

Fork of Ed Bartosh's CCXT Store Work

c2scripts

Scripts for public use that we've randomly written, or have updated from other people's work.

commodity-injection-signatures

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

content-bruteforcing-wordlist

Wordlist for content(directory) bruteforce discovering with Burp or dirsearch

credential-digger

A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models :lock:

cve-2017-5638

PoC for CVE: 2017-5638 - Apache Struts2 S2-045

cve-2018-11235-poc

PoC exploit for CVE-2018-11235 allowing RCE on git clone --recurse-submodules

cve-2018-6574-poc

A simple POC for CVE-2018-6574

dsinternals

Directory Services Internals (DSInternals) PowerShell Module and Framework

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

evil-ssdp

Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.

fast_recon_links

fuzzcoupons

A list of common coupon codes for fuzzing checkout pages.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gf

A wrapper around grep, to help you grep for things

gf-patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic) parameters grep

git-scanner

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

github-search

Tools to perform basic search on GitHub.

githubc2

Github as C2 Demonstration , free API = free C2 Infrastructure