BeetleChunks

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

pwndbg

Exploit Development and Reverse Engineering with GDB Made Easy

peda

PEDA - Python Exploit Development Assistance for GDB

aquatone

A Tool for Domain Flyovers

shadowbroker

The Shadow Brokers "Lost In Translation" leak

shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

ysoserial.net

Deserialization payload generator for a variety of .NET formatters

Mythic

A collaborative, multi-platform, red teaming framework

winafl

A fork of AFL for fuzzing Windows binaries

ruler

A tool to abuse Exchange services

firmadyne

Platform for emulation and dynamic analysis of Linux-based firmware

rpclib

rpclib is a modern C++ msgpack-RPC server and client library

changeme

A default credential scanner.

w12scan

🚀 A simple asset discovery engine for cybersecurity. (网络资产发现引擎)

firmware-analysis-toolkit

Toolkit to emulate firmware and analyse it for security vulnerabilities

Process-Hollowing

Great explanation of Process Hollowing (a Technique often used in Malware)

attifyos

Attify OS - Distro for pentesting IoT devices

Windows10Exploits

Microsoft » Windows 10 : Security Vulnerabilities

gscript

framework to rapidly implement custom droppers for all three major operating systems

mikrotik-tools

Tools for Mikrotik devices

extractTVpasswords

tool to extract passwords from TeamViewer memory using Frida

nextnet

nextnet is a pivot point discovery tool written in Go.

Default-Credentials

Default usernames and passwords for various systems (VoIP,IPMI,Oracle).

InsecureProgramming

mirror of gera's insecure programming examples | http://community.coresecurity.com/~gera/InsecureProgramming/

cve-2019-1458_POC

POC for cve-2019-1458

Winbox_Protocol_Dissector

loubia

Python script to exploit java unserialize on t3 (Weblogic)

insecure-coding-examples

Code examples for the talk Secure Coding Practices in C++

CVE-2020-9547

CVE-2020-9547：FasterXML/jackson-databind 远程代码执行漏洞