Discover @andripwn Open Source projects

mickeybrew (@andripwn)

andripwn

Stars
211
Global Rank 118,181 (Top 5 %)
Followers 99
Following 12
Registered over 5 years ago
Most used languages

Python
53.1 %

Shell
9.4 %

PHP
9.4 %

JavaScript
9.4 %

HTML
9.4 %

C
3.1 %

Lua
3.1 %

Ruby
3.1 %
Location 🇮🇩 Indonesia
Country Total Rank 636
Country Ranking

Lua
17

HTML
102

Python
120

C
242

Ruby
304

Shell
457

PHP
742

JavaScript
4,241

PayloadsAll

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

WPSeku

WPSeku - Wordpress Security Scanner

crawler-python

email scraper/crawls using python (Google/Bing)

FiveM-AntiCheat-Fixed

FiveM AntiCheat

rce

A Simple Web Shell used for Remote Code Execution.

Amazon-Validator

Amazon Email Checker (Update 19/12/20)

django_cve201919844

PoC for CVE-2019-19844 ( https://www.djangoproject.com/weblog/2019/dec/18/security-releases/ )

PwnXSS

PwnXSS: Vulnerability (XSS) scanner exploit

PwnRedir

Open Redirect Vulnerability scanner (Pwn0sec-Project)

Kubolt

Kubolt utility for scanning public kubernetes clusters

CVE-2019-0708

Scanner PoC for CVE-2019-0708 RDP RCE vuln

cache-poisoning

Web cache poisoning attack

DellSupportAssist-RCE-PoC

pwn-vbulletin

Identify vulnerable (RCE) vBulletin 5.0.0 - 5.5.4 instances using Shodan (CVE-2019-16759)

WPScan-Python

WPScan rewritten in Python + some WPSeku ideas

WhatsappSent

dino-exploitjs

Hacking the Chrome Dino Game chrome://dino/

SSH-export-DB

Snakeflash adalah sebuah script auto export dan import database dari database local ke database server yang dikoneksikan melalui jalur SSH.

CVE-2020-11107

XAMPP - CVE-2020-11107

Apple-Validator

Apple Validator Email Checkers - PHP Versions

jsonp

jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints. This could help reveal cross-site script inclusion vulnerabilities or aid in bypassing content security policies.

h1-notify

Get newest public disclosed HackerOne report notifications on your Desktop https://hackerone.com/hacktivity

csrf-generator-payloads

CSRF Generator Payloads

SMS-Python

Send SMS using Python with Twilio API

waybackurl

pulse-exploit

Pulse Secure SSL VPN exploit (CVE-2019-11510) using hosts retrieved from Shodan API.

frida-fuzz

This experimetal fuzzer is meant to be used for API in-memory fuzzing.

url-extractor

CVE-2019-19781

Citrix ADC scanner (CVE-2019-19781) using hosts retrieved from Shodan API.

duckoverflow

instake

Instagram Auto Downloader (photos, videos, profile picture)

CVE-2018-18852

CERIO RCE CVE-2018-18852, authenticated (vendor defaults) web-based RCE as root user.

BashVulnerableLimiting

no rate limit attack using bash

labs1

Pwned 0Day Security

Theme

mIRC-CVE-2019-6453

Proof of calc for CVE-2019-6453

CORS-bypass112119

Cross Origin Resource Sharing Misconfiguration Bypassing Payloads