Andromeda1957

php_filter_chain_generator

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

payloads

Git All the Payloads! A collection of web attack payloads.

httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

anew

A tool for adding new lines to files, skipping duplicates

Edge-Removal

Edge Removal - Completely remove Edge in Windows

NoSQL-Attack-Suite

A couple of different scripts, made to automate attacks against NoSQL databases.

CVE-2023-2640-CVE-2023-32629

GameOver(lay) Ubuntu Privilege Escalation

CVE-2022-44268

A PoC for the CVE-2022-44268 - ImageMagick arbitrary file read

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Ropper

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.

CTF

CTF chall write-ups, files, scripts etc (trying to be more organised LOL)

kerbrute

An script to perform kerberos bruteforcing by using impacket

gef

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

php-reverse-shell

CVE-mitre

https://cve.mitre.org/

PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

PwnKit

Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation

mod-rootme

Ye olde root shell for ye olde httpd

google-ctf

Google CTF

CrackMapExec

A swiss army knife for pentesting networks

sqlmap

Automatic SQL injection and database takeover tool

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

Empire

Empire is a PowerShell and Python post-exploitation agent.

exploitdb

The legacy Exploit Database repository - New repo located at https://gitlab.com/exploit-database/exploitdb

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

hoaxshell

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

evil-winrm

The ultimate WinRM shell for hacking/pentesting

PoshC2

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

dnschef

DNSChef - DNS proxy for Penetration Testers and Malware Analysts