Jakom

godkiller. Vulnerabilities you my miss during a penetration testing.

discord-theory-I. My attempt to reverse the Discord nitro token generation function.

MultiTapBurp. A Burp Suite extension that helps track and manage multiple sessions simultaneously by color-coding HTTP requests based on custom patterns.

CVE-2021-24499. Mass exploitation of CVE-2021-24499 unauthenticated upload leading to remote code execution in Workreap theme.

glimpse-into-web-penetration-testing. A glimpse into web penetration testing example, that I did me and @Edd13Mora in our free time, for beginners to have an idea about websec.

secdojo-23jan. SecDojo 23jan CTF writeup.

CVE-2021-41773. Exploitation of CVE-2021-41773 a Directory Traversal in Apache 2.4.49.

really-good-cybersec. A really good cybersec reading materials.

lookuper. A simple tool for wide targeting using ASN.

DiscordEmojisStealer. Use emojis everywhere without having a nitro or steal other emojis to use them on your server.

BundleScout. A tool designed to extract and analyze React Native bundles from Android APK files. It provides insights into the structure and content of the JavaScript code within the APK, identifying API endpoints, potential secrets, and other relevant information.

ultimateclone. script to clone all your 42 projects at once

PHPTickler. A fast, reliable and lightweight PHP code scanner for detecting XSS, SQLi, Path Traversal, and RCE vulnerabilities.

WinUSBKiller. C#

CVE-2018-18925. Exploitation of CVE-2018-18925 a Remote Code Execution against the Git self hosted tool: Gogs.

Ruby2.x-RCE-Deserialization. Code execution by using a Ruby Universal Gadget when an attacker controls the data passed to Marshal.load().

SimplePyInteractsh. Python-based integration for Interactsh client, designed for registering and managing interactions.

spring4shell-secdojo. A write-up for SecDojo Spring4shell lab.

CVE-2019-5420. A vulnerability can allow an attacker to guess the automatically generated development mode secret token.

CVE-2018-0114. Exploitation of a vulnerability in Cisco's node-jose, a JavaScript library created to manage JWT.

Boxer. Auto scanning tool that will help you during playing on HackTheBox, TryHackMe...etc

API-to-Shell. Exploiting API to Shell challenge from Pentesterlab serialize badge.

Hack-the-Box-OSCP-Preparation. Hack-the-Box-OSCP-Preparation

CVE-2016-2098. Remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data.

PHP-8.1.0-dev-RCE. Script to exploit PHP-8.1.0-dev-RCE and gain reverse shell.

RyouYoo.

AllAboutBugBounty. All about bug websites (bypasses, payloads, and etc)

auto_42_projecter. A tool that will create 42 project files structure for you.

PenTestMethodology2020. PenTest Methodology 2020

loader-CVE-2020-14343. A web application vulnerable to CVE-2020-14343 insecure deserialization leading to command execution in PyYAML package.

thnb-ctf-writeups. Writeups for the challenges I made for THNB national CTF

3DPrint-Lite-1.9.1.4-File-Upload. Analysis of WordPress 3D Print Lite 1.9.1.4 - arbitrary file upload vulnerability.

Vault6. Archiving Leaked samples from Different sources for Different Uses

RT. A Raytracing program from scratch in C language, with complex shapes, texture mapping, soft shadows, multiple lights and fractals.

CVE-2018-11235. Auto malicious git repository creation to exploit CVE-2018-11235 a Remote Code Execution using Git Sub module.

Struts-s2-045. Exploit script of Remote Code Execution in Struts 2 application.

unhide-the-flag. unhide the flag ! stego challenge by Lelouche01

CBC-MAC. Exploitation of signature of non-fixed size messages with CBC-MAC challenge on Pentesterlab.

php-reverse-shell. PHP

filterbypass. Browser's XSS Filter Bypass Cheat Sheet

SecurityTesting. Shell

recheck. recheck script for 42 projects

ReconNotes. Just some public notes that can be useful and i want let the world knows.

Parth. Heuristic Vulnerable Parameter Scanner

Awesome-WAF. 🔥 Everything awesome about web-application firewalls (WAF).

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Reconizer. Shell

RazXSS. Easy XSS web challenge.

axiom. The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

Burp2Discord. A Burp Suite extension that allows you to send HTTP requests and responses directly to Discord via webhooks.

solidity-hacking. Hacking smart contracts training

dirty_snap. A script to generate malicious snap package.

CVE-2016-10033. Remote Code Execution vulnerability in PHPMailer.

hacking_env. Shell

liffy. Local file inclusion exploitation tool

gatsby-portfolio-dev. A portfolio for developers

CTFS_SETUP. those are some ctfs that I made while learning !