securepo Goto Github PK

cloudscraper

A Python module to bypass Cloudflare's anti-bot page.

community-scripts

A collection of ZAP scripts provided by the community - pull requests very welcome!

continuous-threat-modeling

A Continuous Threat Modeling methodology

crlfuzz

A fast tool to scan CRLF vulnerability written in Go

cve-2019-11043

(PoC) Python version of CVE-2019-11043 exploit by neex

cve-2019-16278

Directory transversal to remote code execution

cve-2019-5418

CVE-2019-5418 - File Content Disclosure on Ruby on Rails

cve-2021-22205

GitLab CE/EE Preauth RCE using ExifTool

debugtron

Debug in-production Electron based app

dependency-check-sonar-plugin

Integrates Dependency-Check reports into SonarQube

docem

Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)

docker-openvpn

🔒 OpenVPN server in a Docker container complete with an EasyRSA PKI CA

dostoevsky-pentest-notes

Notes for taking the OSCP in 2097. Read in book form on GitBook

electronegativity

Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.

enjarify

enumerator

Scripts to make like easy for CTF/PenTest

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

extanalysis

Browser Extension Analysis Framework - Scan, Analyze Chrome, firefox and Brave extensions for vulnerabilities and intels

extensionizr

Extensionizr! Create a chrome extension in 15 seconds!

ffuf

Fast web fuzzer written in Go

fuxploider

File upload vulnerability scanner and exploitation tool.

gf

A wrapper around grep, to help you grep for things

gifoeb

exploit for ImageMagick's uninitialized memory disclosure in gif coder

github-search

Tools to perform basic search on GitHub.

gitleaks

Audit git repos for secrets 🔑

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

gittyleaks

:droplet: Find sensitive information for a git repo

gosdl

goSDL

gotestwaf

An open-source project in Golang to test different web application firewalls (WAF) for detection logic and bypasses

graphqlmap

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.