jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

created at March 14, 2023, 1:49 a.m.

11

1,025

64

CVE-2023-3519

RCE exploit for CVE-2023-3519

created at July 21, 2023, 8:17 p.m.

1

142

18

cloudfoxable

Create your own vulnerable by design AWS penetration testing playground

created at Jan. 17, 2023, 3:45 p.m.

8

254

24

sliver

Adversary Emulation Framework

created at Jan. 17, 2019, 10:07 p.m.

140

7,252

1,007

GitGot

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

created at June 14, 2019, 6:33 p.m.

15

467

55

GadgetProbe

Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

created at Jan. 21, 2020, 7:45 p.m.

8

124

15

rmiscout

RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities

created at April 16, 2020, 9:04 p.m.

6

103

17

smogcloud

Find cloud assets that no one wants exposed 🔎 ☁️

created at Jan. 15, 2020, 10:11 p.m.

18

82

9

h2csmuggler

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

created at Aug. 21, 2020, 5:21 p.m.

9

116

12

unredacter

Never ever ever use pixelation as a redaction technique

created at Oct. 22, 2021, 4:02 p.m.

69

7,281

661

Imperva_gzip_WAF_Bypass

None

created at Jan. 7, 2022, 5:38 p.m.

4

82

15

sliver-gui

A Sliver GUI Client

created at Jan. 19, 2021, 6:57 p.m.

8

85

4

cloudfox

Automating situational awareness for cloud penetration tests.

created at Sept. 8, 2022, 2:39 a.m.

16

880

70