dsm

Pinkerton. 🕵️ Python project to crawl for JavaScript files and search for secrets like API keys, authorization tokens, hardcoded credentials, etc.

juumla. 🦁 Python project to identify and scan for vulnerabilities related to the Joomla CMS project. It scans for common misconfigurations and public vulnerabilities.

Apepe. 📲 Apepe is a project developed to help to capture informations from a Android app through his APK file. It can be used to extract the content, get app settings, suggest SSL Pinning bypass based on the app detected language, extract deeplinks from AndroidManifest.xml, JSONs and DEX files.

tomcter. 😹 Python project to bruteforce Apache Tomcat manager login with known-default credentials

Ozzy. [abandoned] 👁 Ozzy is a dark omnipotent theme for IDA, Git Bash, Sublime, Visual Studio Code etc...

WSOB. 😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464.

Discor. [abandoned] ⚡ Discor is a Node.js tool created to help people which wants to create Discord bots more fast.

pwnfaces. exploit for CVE-2017-1000486 vulnerability with SOCKS proxy support

extensions-wordlist. 🔍 Improve your files enumeration with specific extensions!

dbf. [abandoned] 🔥 DBF or Don't be Fired is a Visual Studio Code extension which send message boxes to remind you to avoid common mistakes

saasy. discover third-party services from companies

blobber. 🔵 Blobber is a tool focused on enumerating files stored in an Azure Blob Storage Service with anonymous access enabled.

OAO. ⚙️ Operating Account Operators (OAO) is a Golang tool to interact with the LDAP protocol to manage account groups, roles, ACLs/ACEs, etc...

hexodus. enumerate and attack Active Directory through protocols

slides.

doom. Enumerate ADCS certificate templates to identify security risks

hackthebox. Notes Taken for HTB Machines & InfoSec Community.

AllAboutBugBounty. All about bug bounty (bypasses, payloads, and etc)

aglpi. 🖥️ Extract GLPI instance information through telemetry function

gitter-rust. Learning Rust - Project (1)

Priv2Admin. Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.

Pentest-Tools.

git-dumper. A tool to dump a git repository from a website

zobbix. 🐍 Zabbix 4.2 Auth Bypass

wappalyzer-extension-dos. Load 6500+ technologies in one-shot and "crash" Wappalyzer