0xTomTom

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

ILSpy

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

twint

An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.

owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

Empire

Empire is a PowerShell and Python post-exploitation agent.

monkey

Infection Monkey - An open-source adversary emulation platform

PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

GOAD

game of active directory

Invoke-Obfuscation

PowerShell Obfuscator

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

OffensiveNim

My experiments in weaponizing Nim (https://nim-lang.org/)

no-defender

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

hakrevdns

Small, fast tool for performing reverse DNS lookups en masse.

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

Corsy

CORS Misconfiguration Scanner

TREVORspray

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

evilarc

Create tar/zip archives that can exploit directory traversal vulnerabilities

chainbreaker

Mac OS X Keychain Forensic Tool

bbrf-client

The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

SME

sippts

Set of tools to audit SIP based VoIP Systems

CVE-2021-3493

Ubuntu OverlayFS Local Privesc

Ninjasploit

A meterpreter extension for applying hooks to avoid windows defender memory scans

vulcan

a tool to make it easy and fast to test various forms of injection

Nimplant

A cross-platform implant written in Nim

nl-kat-coordination

Repo nl-kat-coordination for minvws

nl-covid19-notification-app-ios

virtualseccons

An ongoing list of virtual cybersecurity conferences.

nl-covid19-notification-lab-ios

iOS app for experiments with GAEN and Bluetooth protocols