tntwebwiz Goto Github PK

Type: Organization

tntwebwiz's Projects

4nonimizer

A bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers (OpenVPN)

a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

abd

Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories

absolutezero

Python APT Backdoor-Botnet / Python MuddyWater Recreation

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

alloc8

Write-up for alloc8 untethered bootrom exploit for iPhone 3GS

allthingsandroid

A Collection of Android Pentest Learning Materials

analyzepe

Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.

android-keyboard-gadget

Convert your Android device into USB keyboard/mouse, control your PC from your Android device remotely, including BIOS/bootloader.

apsoft-web-scanner-v2

Powerful dork searcher and vulnerability scanner for windows platform

auto_tor_ip_changer

change your Ip address automatically This tool based on tor project

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesome-linux-apps

🚀 A list of awesome applications for 🐧 Linux distributions.

awesome-reverse-engineering

Reverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! (More than 3500 open source tools and 2300 posts&videos)

babysploit

:baby: BabySploit Beginner Pentesting Toolkit/Framework Written in Python :snake:

bug-bounty-dorks

List of Google Dorks for sites that have responsible disclosure program / bug bounty program

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugbountydorks

This repo contains all the Bug Bounty Dorks sourced from different awesome sources and compiled at one place

BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦---burpsuite-pro burpsuite-extender burpsuite cracked-version hackbar hacktools fuzzing fuzz-testing burp-plugin burp-extensions bapp-store brute-force-attacks brute-force-passwords waf sqlmap jar

byob

BYOB (Build Your Own Botnet)

bypass-web-application-firewalls

Bypassing-Web-Application-Firewalls-And-XSS-Filters A series of python scripts for generating weird character combinations and lists for BurpSuite Pro for bypassing web application firewalls (WAF) and XSS filters. These python scripts have been created to fuzz wierd combinations: URL Escape Characters HTML Escape Characters Binary Characters These scripts were created during an assessment, while trying to bypass a Web Application Firewall (WAF) in order to exploit a XSS vulnerability. Differnt webservers and browsers interpret URL and strange characters differently which could lead to the bypassing of security controls. When I tried to send a > or < character the WAF would block the request. The following URL escapes I have noticed are traslated to < > ' by Apache2 based web servers: %(N%(n%)S%)U%)^%)s%)u%*C%*E%*c%*e%,.%.#%1N%1n%2S%2U%2^%2s%2u%3C%3E%3c%3e%5.%7#%:C%:E %:c%:e%HN%Hn%IS%IU%I^%Is%Iu%JC%JE%Jc%Je%L.%N#%XN%Xn%YS%YU%Y^%Ys%Yu%ZC%ZE%Zc%Ze%.%^# %hN%hn%iS%iU%i^%is%iu%jC%jE%jc%je%l.%n#%xN%xn%yS%yU%y^%ys%yu%zC%zE%zc%ze%|

tntwebwiz Goto Github PK

tntwebwiz's Projects

Recommend Projects

Recommend Topics

Recommend Org