mgcfish Goto Github PK

commix

Automated All-in-One OS Command Injection and Exploitation Tool

commix-testbed

A collection of web pages, vulnerable to command injection flaws.

commodity-injection-signatures

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

commonspeak2

Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

compsecattacklabs

Contains Attack labs

connect_back_bind_payloads

Simple connect-back and bind payloads written in C# and work on Linux, Mac, and Windows.

continuousintrusion

Material related to my talks at various conferences on using Continuous Integration tools (Jenkins, Teamcity, Go, Hudson, CruiseControl) for penetration testing

coolsvgxss

simple demo of XSS in an SVG

corporate-osint

cors

JSON API's Are Automatically Protected Against CSRF, And Google Almost Took It Away.

cors-pdf

This is a simple demo that shows you can host a PDF cross origin in chrome, and track a user's interaction with the PDF with the default chrome PDF viewer.

cortanascripts

My collection of Cortana scripts I've written

cpscam

Bypass captive portals by impersonating inactive users

cracker

Simple bash scripts very helpful for cracking passwords.

crackmapexec

A swiss army knife for pentesting Windows/Active Directory environments

crackmapexecwin

The great CrackMapExec tool compiled for Windows

crawlic

Web recon tool (find temporary files, parse robots.txt, search some folders, google dorks and search domains hosted on same server)

credcrack

A fast and stealthy credential harvester

creddump7

credgrap_ie_edge

Extract stored credentials from Internet Explorer and Edge

creep-web-app-scanner

A web app scanner

crosssitecontenthijacking

Content hijacking proof-of-concept using Flash, PDF and Silverlight

crowbar

Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.

cs-suite

Cloud Security Suite - One stop tool for auditing the security posture of AWS infrastructure.

csasc

Cobalt Strike Aggressor Script Collection

cscriptshell

CScriptShell, a Powershell Host running within cscript.exe

csp-bypass

A Burp Plugin for Detecting Weaknesses in Content Security Policies

csrf-poc-genorator

This is a simple CSRF Proof of Concept generator that supports multiple form encodings and methods

csrf-request-builder

ctf-katana

This repository aims to hold suggestions (and hopefully/eventually code) for CTF challenges. The "project" is nicknamed Katana.