0x90n

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

pwntools

CTF framework and exploit development library

Sublist3r

Fast subdomains enumeration tool for penetration testers

public-pentesting-reports

A list of public penetration test reports published by several consulting firms and academic security groups.

monkey

Infection Monkey - An open-source adversary emulation platform

pointers-for-software-engineers

A curated list of topics to start learning software engineering

itpol

Useful IT policies

commix

Automated All-in-One OS Command Injection Exploitation Tool.

knock

Knock Subdomain Scan

subbrute

A DNS meta-query spider that enumerates DNS records, and subdomains.

OSXAuditor

OS X Auditor is a free Mac OS X computer forensics tool

awesome-vehicle-security

🚗 A curated list of resources for learning about vehicle security and car hacking.

dump1090

Dump1090 is a simple Mode S decoder for RTLSDR devices

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

Unix-Privilege-Escalation-Exploits-Pack

Exploits for getting local root on Linux, BSD, AIX, HP-UX, Solaris, RHEL, SUSE etc.

ctf-writeups

CTF write-ups from the VulnHub CTF Team

mellivora

Mellivora is a CTF engine written in PHP

kudos

An example of Svbtle style kudos

bugbountydash

[depreciated] Terminal dashboard for bug bounty hunters that use HackerOne and Bugcrowd

quals-2016

2016 DEF CON Qualifier Challenges

extractdata

Live at http://extractdata.club

albatar

Albatar is a SQLi exploitation framework in Python

rpef

Abstracts and expedites the process of backdooring stock firmware images for consumer/SOHO routers

URP

Ucki's Recon & Enumeration Pack

stuff

Things I've coded, or use (cause I can't find them online anymore)

RitX

Reverse IP Lookup Tool that allows you to use an IP address to identify all websites hosted on a server.

Infernal-Linux

Notes

ipcrawl

Crawl through ip address space getting DNS names

Pentester_Cheat_Sheet

Notes for all my Pentesting to help my bad memory :p