okaayfine Goto Github PK

poccollect

Poc Collected for study and develop

postmessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

ppscan

Client Side Prototype Pollution Scanner

privatecollaborator

A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate

prototype-pollution-nsec18

Content released at NorthSec 2018 for my talk on prototype pollution

prototypepollution-lab

Prototype Pollution Lab

proxy-attackchain

proxylogon, proxyshell, proxyoracle and proxytoken full chain exploit tool

python

All Algorithms implemented in Python

quasar

Remote Administration Tool for Windows

r3con

Just some bash scripting to help your recon.

race-the-web

Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.

rce-0-day-for-ghostscript-9.50

RCE 0-day for GhostScript 9.50 - Payload generator

reapoc

OpenSource Poc && Vulnerable-Target Storage Box.

reconator

Automated Recon for Pentesting & Bug Bounty

regulator

Automated learning of regexes for DNS discovery

rekon

The project contains multiple shell scripts for automating the tasks during recon.

rengine

reNgine is a reconnaissance engine(framework) that does end-to-end reconnaissance with the help of highly configurable scan engines and does information gathering about the target web application. reNgine makes use of various open-source tools and makes a configurable pipeline of reconnaissance.

request_smuggler

Http request smuggling vulnerability scanner

resources

A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.

restler-fuzzer

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities

rextract

CLI tool that extracts a regex pattern from a list of urls ( Rust )

s3-inspector

Tool to check AWS S3 bucket permissions

s3-leaks

List of S3 Hacks

s3scanner

Scan for open S3 buckets and dump

sap_recon

PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)

scan-apple-asn-for-vulnerabilities-and-leave-no-port

scanners-box

[Project-Kob-6]The toolbox of open source scanners - 安全行业从业人员自研开源扫描器合集👻

scrummage

The Ultimate OSINT Framework

second-order

Second-order subdomain takeover scanner