Víctor García

log4j-detect. Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URLs with multithreading

web-hacking-playground. Web application with vulnerabilities found in real cases, both in pentests and in Bug Bounty programs.

FireStorePwn. fsp - Firestore Database Vulnerability Scanner Using APKs

adx-query. Offline LDAP query engine for Sysinternals ADExplorer snapshots (.dat).

OneParamsWordlistToRuleThemAll.

multiCookie. Python 3 script to get session cookies given a credentials file

rdf-xss. File with RDF Extension for XSS in Uploaded Files

nac_bypass_ns. Shell

phish-simulator. Run executable attachments of new incoming mails

MostCommonWebPorts. Most popular HTTP/S ports extracted from Shodan through scraping