xqd-ai Goto Github PK

iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

jndi-exploit-kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

kiterunner

Contextual Content Discovery Tool

lambda-port-scanner

Uses a controller to create workers in AWS Lambda to conduct distributed port scans on selected targets, with automatic source IP rotation

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

learn-evm-attacks

Learn & Contribute on previously exploited vulnerabilities across several EVM projects.

lemma

Remote CLI tools at your fingertips

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

log4j-shell-poc

A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability.

mass-pwn-vbulletin

Identify vulnerable (RCE) vBulletin 5.0.0 - 5.5.4 instances using Shodan (CVE-2019-16759)

matchandreplace

Match and Replace script used to automatically generate JSON option file to BurpSuite

my-reports

Here I'll share my pentest's reports. Html or Pdf or just txt files;

mywebappscripts

A collection of all the lists, scripts and techniques I use while doing web application penetration tests.

nacos-poc

nmap-http-screenshot

Modified nmap script from Trustwave to work with SSL / not hang and use CPU-independent wkhtmltoimage

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

nuclei-templates-collection

Nuclei Templates Collection

nucleifuzzer

NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications

ofbiz-cve-2023-49070-rce-poc

offensiveclouddistribution

Leverage the ability of Terraform and AWS or GCP to distribute large security scans across numerous cloud instances.

onelistforall

Rockyou for web fuzzing

parse-server-codecraft

Example server using Express and the parse-server module.

pinaak

A vulnerability fuzzing tool written in bash, it contains the most commonly used tools to perform vulnerability scan

poc

priv8-nuclei-templates

My Priv8 Nuclei Templates

privatecollaborator

A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate

python-docs-hello-world

A simple python application for docs

rogue-jndi

A malicious LDAP server for JNDI injection attacks

scantastic-tool

It's bloody scantastic