
AutoRecon
Multi-threaded network reconnaissance tool that automates service enumeration, port scanning, and information gathering for penetration testing and…

Multi-threaded network reconnaissance tool that automates service enumeration, port scanning, and information gathering for penetration testing and…

GTFO Command Line Interface for easy binaries search commands that can be used to bypass local security restrictions in misconfigured systems.

Wordlist Bruteforcer for GoFile (gofile.io) Download Passwords

Linux enumeration tool for pentesting and CTFs with verbosity levels

Monitor linux processes without root permissions

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security…

Chrome extension that passively finds debug parameters, sensitive headers and exposed paths (.env, .git, actuator) while you browse. Built for bug…

This is an automated exploitation script for the Hack The Box machine *Titanic*. It extracts Gitea user hashes via LFI, assists in cracking them, and…

PoC scripts to exploit LFR (Local File Read) via PHP filters chain oracle (php://filter), especially for CTF purposes or the exploit of…

Multi-threaded URL enumeration/content-discovery tool in Python.

An interactive wizard front end for IVRE to make creating scans to the database easier.

Proof-of-concept exploit for CVE-2022-44268 enabling arbitrary file read via crafted PNG images processed by ImageMagick. Includes generation and…

CVE-2021-29447 - Authenticated XXE Injection - WordPress < 5.7.1 & PHP > 8

:knife: Scan memory for secrets and more. Maybe eventually a full /proc toolkit.

cups-root-file-read.sh | CVE-2012-5519

Automatic Service Enumeration Script

This tool aims at automating the identification of potential service running behind ports identified manually either through manual scan or services…