stark0de

nginxpwner. Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.

ocr-recon. This tool is useful to find a particular string in a list of URLs using tesseract's OCR (Optical Character Recognition) capabilities

regsave. This tool is useful in case you want to evade the detection based on simple rules when trying to dump the SAM, SYSTEM or SECURITY hives using the typical reg.exe save command.

zip-symlink-payload-creator. This is a simple tool to create ZIP payloads using a provided wordlist for the symlink attack (present in some file upload vulnerabilities)

pe-tools. This repository contains various tools useful for offensive operations (reversing, etc) regarding the PE (Portable Executable) format

ippsec-cli. This a simple tool to query the awesome ippsec.rocks website from your terminal

internalipcheck. Python

tokenpriv. A simple script to check the privileges included in your access token

ciphercheck. This tool checks if a specific TLS ciphersuite is able to bypass a WAF

taller-bugbounty-honeysec. Python

logcat-strings. Simple tool to look in real time for possible information leaks in an Android app's logs

emailissuescheck. Simple tool to check for SPF, DMARC and DKIM issues in a list of domains

azure-finder. Simple script to find all Azure-based assets given a domain list

msrpcbruteforce. Simple tool to perform bruteforce and dictionary attacks to MS-RPC services

endpointpdfextractor. Simple file to create wordlists out of PDF documents (for example of PDFs of some product's docs)