ivan-sincek

🤔

Easily weaponized malware? Huh...

Ivan Šincek ivan-sincek

🤔

Easily weaponized malware? Huh...

Senior offensive security engineer and bug hunter. These are some of the security-related codes I wrote in my free time.

577 followers · 8 following

Achievements

Highlights

property-lister Public

Extract and convert property list files from SQLite database files and from other property list files.

python security ios mobile database xml cache

Python 6 1 MIT License Updated Dec 3, 2024
scrapy-scraper Public

Web crawler and scraper based on Scrapy and Playwright's headless browser.

javascript python security crawler scraper downloader web

Python 12 1 MIT License Updated Dec 3, 2024
chad Public

Search Google Dorks like Chad. / Broken link hijacking tool.

python search-engine security crawler scraper google social-media

Python 24 3 MIT License Updated Dec 3, 2024
file-scraper Public

Scrape files for sensitive information, and generate an interactive HTML report. Based on Rabin2.

python security strings incident-response scraping penetration-testing bug-bounty

Python 9 1 MIT License Updated Nov 30, 2024
android-penetration-testing-cheat-sheet Public

Work in progress...

android security penetration-testing bug-bounty magisk mobsf frida

JavaScript 371 57 MIT License Updated Nov 29, 2024
nagooglesearch Public

Not another Google searching tool.

python search-engine security google requests penetration-testing bug-bounty

Python 9 MIT License Updated Nov 27, 2024
bot-safe-agents Public

A library for fetching a list of bot-safe user agents.

python security browser scraping crawling rate-limiting penetration-testing

Python 2 MIT License Updated Nov 25, 2024
amounts Public

Generate a wordlist to fuzz amounts or any other numerical values.

python security finance quality-control currency payments penetration-testing

Python 8 2 MIT License Updated Nov 22, 2024
penetration-testing-cheat-sheet Public

Work in progress...

security web penetration-testing bug-bounty offensive-security ethical-hacking web-penetration-testing

PHP 667 139 MIT License Updated Nov 17, 2024
ivan-sincek Public

My profile info.

4 1 Updated Nov 17, 2024
go-actions Public archive

Golang SAST workflows.

testing golang yaml workflows sast github-actions golangci-lint

Go 2 MIT License Updated Nov 17, 2024
forbidden Public

Bypass 4xx HTTP response status codes and more. Based on PycURL and Python Requests.

python security web curl penetration-testing brute-force bug-bounty

Python 230 40 MIT License 1 issue needs help Updated Oct 27, 2024
browser-extension-automation Public

Run a browser extension in a sandboxed web browser and without any fear of corrupting or loosing your real data.

python chrome-extension security chrome automation web chromium

Python 3 MIT License Updated Sep 20, 2024
solidity-learning Public

Work in progress...

javascript unit-testing ethereum smart-contracts blockchain truffle solidity

JavaScript 4 1 MIT License Updated Sep 20, 2024
wifi-penetration-testing-cheat-sheet Public

Work in progress...

security wifi penetration-testing bug-bounty offensive-security evil-twin ethical-hacking

457 83 MIT License Updated Sep 20, 2024
malware-apk Public

Are your bug bounty reports getting rejected because you don't use a "malicious" PoC app to exploit the vulnerabilities? I've got you covered!

android java security sqlite malware penetration-testing bug-bounty

Java 3 MIT License Updated Sep 2, 2024
xss-catcher Public

Simple API for storing all incoming XSS requests and various XSS templates.

javascript api php cors security web xss

HTML 45 7 MIT License Updated Jul 18, 2024
ios-penetration-testing-cheat-sheet Public

Work in progress...

security ios penetration-testing bug-bounty mobsf frida offensive-security

JavaScript 314 56 MIT License Updated Jul 15, 2024
dns-exfiltrator Public

Exfiltrate data with DNS queries. Based on CertUtil and NSLookup.

dns security networking malware penetration-testing batch bug-bounty

Batchfile 22 8 MIT License Updated Dec 30, 2023
jwt-bf Public archive

Brute force a JWT token. Script uses multithreading.

python security jwt web penetration-testing brute-force bug-bounty

Python 9 1 MIT License Updated Dec 24, 2023
mixaudit-sarif Public archive

Convert MixAudit's JSON formatted results to SARIF format.

testing yaml elixir workflows sast github-actions sobelow

Python 1 MIT License Updated Nov 26, 2023
php-reverse-shell Public

PHP shells that work on Linux OS, macOS, and Windows OS.

windows macos linux php security web networking

PHP 462 150 GNU General Public License v2.0 Updated Oct 3, 2023
python-actions Public archive

Python SAST workflows.

python testing yaml pytest workflows sast github-actions

Python 2 MIT License Updated Sep 5, 2023
transporter Public archive

Send packets through raw sockets.

python networking icmp raw-sockets transporter

Python 5 1 MIT License Updated Jun 25, 2023
domain-extractor Public archive

Extract valid or partially valid domain names and IPs from malicious or invalid URLs.

python url security extractor incident-response domain penetration-testing

Python 8 3 MIT License Updated Jun 19, 2023
java-reverse-tcp Public

JAR, Java, and JSP shells that work on Linux OS, macOS, and Windows OS.

security web networking reverse-shell log4j web-shell penetration-testing

Java 56 8 MIT License Updated Apr 27, 2023
keylogger Public archive

Windows OS keylogger with a hook mechanism (i.e. with a keyboard hook procedure).

windows security c-plus-plus reverse-engineering malware bug-bounty keylogger

C++ 80 32 MIT License Updated Apr 27, 2023
websocket-bf Public archive

Brute force a REST API query through WebSocket. Based on cURL.

bash security networking curl rest-api websocket brute-force

Shell 9 5 MIT License Updated Apr 27, 2023
dnsrecon-chunked Public archive

Brute force subdomains in multiple smaller iterations. Based on DNSRecon.

bash dns security web penetration-testing bug-bounty offensive-security

Shell 7 1 MIT License Updated Apr 27, 2023
send-tcp-payload Public archive

Send a payload through TCP.

python security networking tcp penetration-testing payload offensive-security

Python 2 MIT License Updated Apr 27, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Ivan Šincek ivan-sincek

Achievements

Achievements

Highlights

Block or report ivan-sincek

property-lister Public

scrapy-scraper Public

chad Public

file-scraper Public

android-penetration-testing-cheat-sheet Public

nagooglesearch Public

bot-safe-agents Public

amounts Public

penetration-testing-cheat-sheet Public

ivan-sincek Public

go-actions Public archive

forbidden Public

browser-extension-automation Public

solidity-learning Public

wifi-penetration-testing-cheat-sheet Public

malware-apk Public

xss-catcher Public

ios-penetration-testing-cheat-sheet Public

dns-exfiltrator Public

jwt-bf Public archive

mixaudit-sarif Public archive

php-reverse-shell Public

python-actions Public archive

transporter Public archive

domain-extractor Public archive

java-reverse-tcp Public

keylogger Public archive

websocket-bf Public archive

dnsrecon-chunked Public archive

send-tcp-payload Public archive