0xJeti

PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Reverse-Engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM and embedded RISC-V architectures.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

awesome-bugbounty-tools

A curated list of various bug bounty tools

kiterunner

Contextual Content Discovery Tool

ParamSpider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

SSRF-Testing

SSRF (Server Side Request Forgery) testing resources

31-days-of-API-Security-Tips

This challenge is Inon Shkedy's 31 days API Security Tips.

puredns

Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.

go-wsl2-host

Automatically update your Windows hosts file with the WSL2 VM IP address

Damn-Vulnerable-GraphQL-Application

Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

crlfuzz

A fast tool to scan CRLF vulnerability written in Go

writeups

MindAPI

Organize your API security assessment by using MindAPI. It's free and open for community collaboration.

apkurlgrep

Extract endpoints from APK files

dnsvalidator

Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.

J2EEScan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

GadgetProbe

Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

posta

🐙 Cross-document messaging security research tool powered by https://enso.security

pown

Pown.js is a security testing an exploitation toolkit built on top of Node.js and NPM.

tipjar

json-interop-vuln-labs

Companion labs to "An Exploration of JSON Interoperability Vulnerabilities"

poc_salesforce_lightning

Academic purposes only. Attack against Salesforce lightning with guest privilege.

xsstools

xss development frameworks, with the goal of making payload writing easier.

dnspy

Find subdomains and takeovers.

dooked

DNS and Target HTTP History Local Storage and Search

AWSBurpCollaborator

Deploy a Private Burpsuite Collaborator using boto3 Python Library

Huge_DIR_wordlist

dnsrebinder

Go tool to perform DNS rebinding