Robbie

bruteforce-lists. Some files for bruteforcing certain things.

My-Shodan-Scripts. Collection of Scripts for shodan searching stuff.

keywords.

Jira-Scan. CVE-2017-9506 - SSRF

cve-2020-0688. cve-2020-0688

ssrf-finder. Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.

AWS-Scanner. Scans a list of websites for Cloudfront or S3 Buckets

bugbountydork. Bug Bounty Dork

docker-ssh-honey. SSH Honey pot for docker

mass-s3-bucket-tester. This tests a list of s3 buckets to see if they have dir listings enabled or if they are uploadable

open-redirect. Open Redirect Finder.

cloud-cidr. AWS,AZURE,GOOGLE CLOUD IP CIDRS

metadata-one-liners. retrive metadata endpoint data with these one liners.

kube-scan. Kubernetes Scanner

mcp-web-browser. An advanced web browsing server for the Model Context Protocol (MCP) powered by Playwright, enabling headless browser interactions through a flexible, secure API.

RPI-Control. Automated 433Mhz Control for Status Power Sockets using a Raspberry Pi

grayhatwarfare-docs-finder. Finds Documents On Cloud Assets Using grayhatwarfare API for short urls

liferay-pwn. Vuln Liferay scanner & Exploit

frida-docker. Dockerised Version of Frida

InfiniteWP-exploit. InfiniteWP Client < 1.9.4.5 - Authentication Bypass

Hikvision-Brute-Force. Brute Force Hikvision Devices that only allow PIN passwords

wheres-my-git. Wheres My Git - Find /.git/config files based on dirs found in home url

AutoRecon. Simple shell script for automated domain recognition with some tools

consul-pwn. Make a Consul Agent Grab Metadata endpoints

wpa-cracking. Command List for Hashcat and default keyspaces.

xssfinder. Toolset for detecting reflected xss in websites

bash-hacks. little scripts of bash stuff that i've found handy.

All-in-One-WP-Migration-Backup-Finder. All-in-One WP Migration-Backup-Finder

hamachi-pi. Install hamachi on your raspberry pi

mini-php-shells. Multiple Shells of the same code with different extentions.

slurp. Enumerate S3 buckets via certstream, domain, or keywords

S3-Listable. S3 Buckets that will let you list all files inside them

s3-tko. AWS S3 Bucket Finder.

aquatone-docker. Docker Version of Aquatone

extract-m3u. Extract username and passwords from IPTV urls

wpa-masshandshakeextract. Needed a way to filter all my pwnagotchi handshakes.

yahoo-bug-bounty. List of hosts from yahoo.com

rb-recon.

Aircrack-NG_RaspberryPI. Installer for Aircrack-NG / Airoscript For Raspberry Pi

wifite2-docker. Docker of Wifite2

wayback-saver. Saves pages to Wayback machine

SecretFinder. SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

phpunit-brute. Tool to try multiple paths for PHPunit RCE CVE-2017-9841

cve-2019-6715. Go

angularjs-csti-scanner. Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.

jamf-log4j. Python

CRLF-Injection-Scanner. Command line tool for testing CRLF injection on list of domains.

Upnp-Exploiter. A Upnp exploitation tool.

firebaseio-checker-go. Firebase url checker in go

urlscan-search. urlscan.io search for domains

BucketSnoop. A Firefox extension and WebSocket handler that checks s3 buckets while your browse.

sms-command-server. Send a SMS to Control Your Linux Box

firebaseio-checker. Checks a list of firebaseio to confirm they are working and have dev access to them

GitGot. Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

cve-2022-23131-exp. Zabbix SSO Bypass

redirector. Redirects any request with which ever http status code you want to a location of your choice

twando. Twitter Multi Account

docker-massscan-webui. Masscan web gui

selenium-abuser. Abuse Open Selenium Gird or Node to get access to metadata endpoint.