4lch3mis7

loc

Count lines of code quickly.

tabletop-lab-creation

Vagrant provisioning scripts to create a simulated network environment for tabletop exercises

pwncat

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

clairvoyance

Obtain GraphQL API schema even if the introspection is disabled

Tiny-XSS-Payloads

A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

oscp

My curated list of resources for OSCP preperation

gittyleaks

:droplet: Find sensitive information for a git repo

hackingtool

ALL IN ONE Hacking Tool For Hackers

Gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

pytm

A Pythonic framework for threat modeling

fromthetransistor

From the Transistor to the Web Browser, a rough outline for a 12 week course

Awesome-Malware-and-Reverse-Engineering

HELK

The Hunting ELK

Awesome-Smart-Contract-Security

A curated list of Smart Contract Security materials and resources For Researchers

certified-kubernetes-administrator-course

Certified Kubernetes Administrator - CKA Course

optimus-manager

A Linux program to handle GPU switching on Optimus laptops.

msdt-follina

Codebase to generate an msdt-follina payload

Hacking-APIs

geowifi

Search WiFi geolocation data by BSSID and SSID on different public databases.

lazys3

not-so-smart-contracts

Examples of Solidity security issues

MalwareSourceCode

Collection of malware source code for a variety of platforms in an array of different programming languages.

awesome-appsec

A curated list of resources for learning about application security

mimikatz

A little tool to play with Windows security

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

gmailify

burpa

Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used to setup Dynamic Application Security Testing (DAST).

cupp

Common User Passwords Profiler (CUPP)