0x90n

terminal

The new Windows Terminal and the original Windows console host, all in the same place!

gitleaks

Protect and discover secrets using Gitleaks 🔑

ffuf

Fast web fuzzer written in Go

CrackMapExec

A swiss army knife for pentesting networks

sliver

Adversary Emulation Framework

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

recon-ng

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

dostackbufferoverflowgood

weaponised-XSS-payloads

XSS payloads designed to turn alert(1) into P1

AllThingsSSRF

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

Interlace

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

BlueKeep

Proof of concept for CVE-2019-0708

bbht

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

AWAE-PREP

This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with the AWAE course. This repo will likely contain custom code by me and various courses.

tko-subs

A tool that can help detect and takeover subdomains with dead DNS records

yersinia

A framework for layer 2 attacks

dnsvalidator

Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.

azucar

Security auditing tool for Azure environments

Serverless-Goat

OWASP ServerlessGoat: a serverless application demonstrating common serverless security flaws

DFW1N-OSINT

Australian Open Source Intelligence Gathering Resources, Australias Largest Open Source Intelligence Repository for Cyber Professionals and Ethical Hackers

packetStrider

A network packet forensics tool for SSH

dji_rev

DJI Reverse engineering

OSCP-Complete-Guide

How to prepare for OSCP complete guide

droneslayers

OpenWERX Drone Challenge January 2016