sean-mcrae Goto Github PK

awesome-osint

:scream: A curated list of amazingly awesome OSINT

bloc-jams

bloc-jams-angular

burp-load-balancer-cookie-scanner

Burp extension to find and decode BigIP and Netscaler cookies

cmd.jsp

A super small jsp webshell with file upload capabilities.

default-credentials

Default usernames and passwords for various systems (VoIP,IPMI,Oracle).

htb-extraction

Pulls HTB names & IPs - Ranges from profile 1 to 172

icmpsh

Simple reverse ICMP shell

kubernetes-kubelet-rce

Kubernetes Kubelet RCE Automated Script. Utilizes both "run" and "exec" debug handlers.

lambdafetch

LambdaFetch is a versatile command-line tool designed to simplify the process of downloading AWS Lambda functions.

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

oauthv1---signing-burp-extension-

Expands the capabilities of Burp Suite's Platform Authentication by adding additional authentication methods (OAuth v1)

offrails

Footprinting Tool

onetwopunch

Use unicornscan to quickly scan all open ports, and then pass the open ports to nmap for detailed scans.

osint-tools

:eyes: Some of my favorite OSINT tools.

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a manual for testing the security of mobile apps. It describes technical processes for verifying the controls listed in the OWASP Mobile Application Verification Standard (MASVS). The MSTG is meant to provide a baseline set of test cases for black-box and white-box security tests, and to help ensure completeness and consistency of the tests.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

project-cogsworth

An attempt to be able to see wifi router locations.

rfiterminal

RFI Automated

slink

Alphanumeric Shellcode (x86) Encoder

squid-scan

Scan loopback ports through Squid Proxy