0x0FB0

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

Privesc

Privilege escalation tools on Mainframe

CVE-2021-40444

CVE-2021-40444 PoC

vulnerable-code-snippets

Twitter vulnerable snippets

WordList

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

Parth

Heuristic Vulnerable Parameter Scanner

Nyx

cats

CATS is a REST API Fuzzer and negative testing tool for OpenAPI endpoints. CATS automatically generates, runs and reports tests with minimum configuration and no coding effort. Tests are self-healing and do not require maintenance.

CVE-2022-26809-RCE

CVE-2022-26809-RCE-EXP

evil-winrm

The ultimate WinRM shell for hacking/pentesting

cve

Gather and update all available and newest CVEs with their PoC.

http2smugl

hui2ochko

exploit for CVE-2021-43848

gatekeeper-library

📚 The OPA Gatekeeper policy library

notary

Notary is a project that allows anyone to have trust over arbitrary collections of data

python-tuf

Python reference implementation of The Update Framework (TUF)

gvisor

Application Kernel for Containers

grafeas

Artifact Metadata API

kube-bench

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

CVE-2021-40444

heap-exploitation

This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.

heap-exploitation

This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.

webapp-wordlists

This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.

portmaster

🏔 Love Freedom - ❌ Block Mass Surveillance

ghostinthepdf

Recaf

The modern Java bytecode editor

sike-nc

Simple console communicator using Supersingular Isogeny Key Encapsulation

JSONBee

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

confused

Tool to check for dependency confusion vulnerabilities in multiple package management systems