Earth

Milad Fadavvi

Expert
@Fadavvi
absolute.red/

Sub-Drill. A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements.

117

Yara-Repo. A script to collect (the most famous) Yara rules from more than 150 free resources. Free alternative to: https://valhalla.nextron-systems.com/

28

Gamal. A tiny flask app for helping red-teamers, purple teamers, and pentesters in delivery, data exfiltration, and some attacks (SSRF, XXE, XSS, Session Hijacking, Session Riding).

13

BurpPro-FastCrawler. The simplest way to integrate your subdomain enum outputs with Burp Pro (Fast Crawler)

6

XML2Elastic. Insert any XML file to Elastic Search ( I Used to send my Pentest results: ZAP, Nmap, Nessus, OpenVAS, Acunetix, Arachni, Nikto, etc )

5

Gopher. C# tool to discover low hanging fruits

2

Fadavvi.github.io. Milad Fadavvi's Personal blog about offensive security

2

CVE-2018-17431-PoC. Proof of consept for CVE-2018-17431

2

scripts. Useful scripts in Pentest and Red-teaming

1

RedTeam-Tactics-and-Techniques. Red Teaming Tactics and Techniques

1

veraz. Veraz is a file and folder finder based on URL. Some kind of file/folder bruteforcer.

1

Sagan. Automation and integration scripts for Sagan

1

Git-Gallivanter. A more flexible way to search on GitHub

1

YCSM. You Can't See Me - a sample, fast, free and open source PHP code obfuscator with encoder

1

bash. Bash Scripts I wrote

1
15
Apply