328

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

graphql-voyager

🛰️ Represent any GraphQL API as an interactive graph

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

fbctf

Platform to host Capture the Flag competitions

staticrypt

Password protect a static HTML page, decrypted in-browser in JS with no dependency. No server logic needed.

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

InfoSec-Black-Friday

All the deals for InfoSec related software/tools this Black Friday

The-Hackers-Hardware-Toolkit

The best hacker's gadgets for Red Team pentesters and security researchers.

cicd-goat

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

demiguise

HTA encryption tool for RedTeams

smokescreen

A simple HTTP proxy that fogs over naughty URLs

reverse-ssh

Statically-linked ssh server with reverse shell functionality for CTFs and such

red-kube

Red Team K8S Adversary Emulation Based on kubectl

CVE-2018-15473-Exploit

Exploit written in Python for CVE-2018-15473 with threading and export formats

graphql-pokemon

Get information of a Pokémon with GraphQL!

creddump7

rayder

A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows

disasm.pro

A realtime assembler/disassembler (formerly known as disasm.ninja)

windows-pentest

Windows Pentest Scripts

alfred-ip-address-workflow

Alfred 5 workflow for getting your local and external IP addresses

HG8045Q

Pwning the Nuro issued Huawei HG8045Q

bof-collection

Collection of Beacon Object Files (BOF) for Cobalt Strike

graphql-disable-introspection

Disable Introspection in GraphQL-JS with a simple validation rule

seclablist

情報セキュリティ関連の大学研究室Webサイトをまとめてみた

PMActivities

AzRedTeamEnumScript

Azure AD RedTeam Full Enumeration Script used to query all aspects of your target Azure tenant.

Azur3Alph4

Azur3Alph4 is a PowerShell module that automates red-team tasks for ops on objective. This module situates in a post-breach (RCE achieved) position.

doc

RISKEN is a monitoring tool for visualizing security risks.

angular-cognito-s3-file-uploader

angular-cognito-s3-file-uploader

macCookies

macCookies decrypt cookies stored in macOS browsers for pentesters.