OneListForAll
six2dez/onelistforallCurated, categorized wordlist generator for web fuzzing, directory enumeration, and subdomain discovery. Automatically syncs 36+ sources, classifies…
curated-resourcesfuzzinginformation-gathering+3
3.3k
six2dez/onelistforallCurated, categorized wordlist generator for web fuzzing, directory enumeration, and subdomain discovery. Automatically syncs 36+ sources, classifies…
maxwitat/cve-2023-36884-scripts-for-intune-remediation-sccm-compliance-baselineThe remediation script should set the reg entries described in https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884 . The detection…
d3mondev/purednsHigh-speed DNS resolver and subdomain bruteforcer with accurate wildcard filtering and DNS poisoning validation for precise reconnaissance.
dsecuredcom/ffufpostprocessingGolang tool which helps dropping the irrelevant entries from your ffuf result file.
themalwareguardian/cve-2025-5548Buffer overflow in FreeFloat FTP Server 1.0 illustrating how a single unsafe handler can generate multiple CVE entries across different commands.
blasty/printer-cracktroDisplays an old-school crack-intro animation on compromised Canon and Lexmark printers, with SDL2 and WebAssembly builds for portability and study.
sreckoskocilic/envocabularyTrace every shell environment variable to its exact file and line origin. Audit shell configs for dead entries, duplicates, and orphaned files across…
armaansidana2003/cve-2025-25617Proof-of-concept demonstrating an incorrect access control vulnerability in Unifiedtransform v2.0, allowing teachers to create syllabus entries…
t3l3machus/acesharkACEshark is a utility designed for rapid extraction and analysis of Windows service configurations and Access Control Entries, eliminating the need…
jovanbulck/sgx-stepA practical attack framework for precise enclave execution control
binarygolf/bggpAnnual small file competition repository with binary golf challenges across themes like polyglots, crashes, self-replication, and downloads,…
runreveal/sigmaliteGo library for parsing and executing Sigma detection rules against log entries, supporting field modifiers, CIDR matching, and custom field resolvers…
inettgmbh/checkmk-log4j-scannerCheckmk extension that scans JAR, WAR, EAR, and AAR files for Log4j versions vulnerable to CVE-2021-44228 by inspecting META-INF pom.properties…
probablysecure/triage-cve-2021-26855-proxylogon---microsoft-exchange-Hands-on CVE triage lab: analyze NVD entries, decode CVSS vectors, map CWE weaknesses, and contextualize risk for high-profile exploits like…
magicsword-io/loldriversCurated database of vulnerable and malicious Windows drivers with YARA, Sigma, ClamAV, and Sysmon detection rules for proactive threat hunting and…
floyd-fuh/jks-private-key-cracker-hashcatNail in the JKS coffin - Cracking passwords of private key entries in a JKS file
jschicht/logfileparserParser for $LogFile on NTFS
bombobombone/cve-2026-73318Proof-of-concept exploit for XenForo CVE-2026-73318, an authorization bypass allowing ACP administrators to trigger site-wide policy re-agreement.…