sdphoton Goto Github PK

aem-eye

A very simple AEM detector written in rust.🦀

aem-groovy-console

The AEM Groovy Console provides an interface for running Groovy scripts in the AEM container. Scripts can be created to manipulate content in the JCR, call OSGi services, or execute arbitrary code using the CQ, Sling, or JCR APIs.

aem-hacker

aem-links

Adobe Experience Manager links, cheat sheets and solutions to common problems.

aemscan

Adobe Experience Manager Vulnerability Scanner

ai-with-python

amass

In-depth attack surface mapping and asset discovery

autopoisoner

Web cache poisoning vulnerability scanner.

autoredirect

Smart and efficient tool to automate open redirect detection at scale.

autossrf

Smart context-based SSRF vulnerability scanner.

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

bcaem

Fast AEM scope gathering tool for all your public and private BugCrowd Programs

bchecks

BChecks collection for Burp Suite Professional

burp-encode-ip

Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.

cache-snake

Web Cache Poisoning automation Tool

chameleon

chromeaudit

Nuclei plugins to audit Chrome extensions

data-mining-using-python

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

dependency-confusion

All About Dependency Confusion Attack, (Detecting, Finding, Mitigating)

desynccl0

A simple tool to detect vulnerabilities described here https://portswigger.net/research/browser-powered-desync-attacks.

diff-last-response

A BApp to show the differences between two responses

dns-analyzer

A Burp Suite extension for finding DNS vulnerabilities in web applications!

dorky

A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon

extended-ssrf-search

Smart ssrf scanner using different methods like parameter brute forcing in post and get...

extended-xss-search

A better version of my xssfinder tool - scans for different types of xss on a list of urls.

forge-poc-templates

frameshifter

Grammar-based HTTP/2 fuzzer with mutation ability

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.