vinnyvinoth Goto Github PK

blind-ssrf-chains

An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

bountytricks

bruteforce-lists

Some files for bruteforcing certain things.

bug-bounty-toolz

BBT - Bug Bounty Tools

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

bug-bounty-wordlists-1

burp-bounty-profiles

Burp Bounty profiles compilation, feel free to contribute!

burp-extensions

Burp Extensions

burpjslinkfinder

Burp Extension for a passive scanning JS files for endpoint links.

burpparamflagger

A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or LFI.

burpsuite-secret_finder

Burp Suite extension to discover apikeys/accesstokens and sensitive data from HTTP response.

burpsuite_403bypasser

Burpsuite Extension to bypass 403 restricted directory

can-i-take-over-dns

"Can I take over DNS?" — a list of DNS providers and how to claim (sub)domains via missing hosted zones

chameleon

chameleon-wordlists

Chameleon Wordlists

cirrusgo

A fast tool to scan SAAS,PAAS App written in Go

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

cloudflair

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

cloudmare

Cloudflare, Sucuri, Incapsula real IP tracker.

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cookiemonster

🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.

custom-gf-patterns

cve-2019-18935

RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.

cve-2019-7238

🐱‍💻 Poc of CVE-2019-7238 - Nexus Repository Manager 3 Remote Code Execution 🐱‍💻

cve-2020-14882

CVE-2020–14882、CVE-2020–14883

cve-2020-5902

Proof of concept for CVE-2020-5902

cve-2020-5902-scanner

Automated script for F5 BIG-IP scanner (CVE-2020-5902) using hosts retrieved from Shodan API.

cve-2022-26138

Atlassian Questions Hardcoded Password (CVE-2022-26138)

cve-2022-44268

A PoC for the CVE-2022-44268 - ImageMagick arbitrary file read

cve-2022-47986

Aspera Faspex Pre Auth RCE