EvilHat

weevely3

Weaponized web shell

996.ICU

Repo for counting stars and contributing. Press F to pay respect to glorious developers.

Awesome-Hacking-1

A collection of various awesome lists for hackers, pentesters and security researchers

codewarrior

code-searching tool and static analysis - Beta

ctf-tools

Some setup scripts for security research tools.

ctf-writeups

CTF write-ups from the VulnHub CTF Team

exploits

Miscellaneous exploit code

github-trending

Tracking the most popular Github repos, updated daily

HeadlessBrowsers

A list of (almost) all headless web browsers in existence

how2exploit_binary

An in depth tutorial on how to do binary exploitation

hunter

(l)user hunter using WinAPI calls only

katoolin

Automatically install all Kali linux tools

lightbulb-framework

Tools for auditing WAFS

linux-exploit-development-tutorial

a series tutorial for linux exploit development to newbie.

Mind-Map

各种安全相关思维导图整理收集

net-creds

Sniffs sensitive data from interface or pcap

nishang

Nishang - PowerShell for penetration testing and offensive security.

pentest

:no_entry: offsec batteries included

pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

phishlulz

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

Publications

Conference slides and White-papers

redsnarf

RedSnarf is a pen-testing / red-teaming tool for Windows enviroments

ruler

A tool to abuse Exchange services

SecLists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

security-advisories

A database of PHP security advisories

shadowbroker

The Shadow Brokers "Lost In Translation" leak

subDomainsBrute

A simple and fast sub domain brute tool for pentesters

visualize_logs

A Python library and command line tools to provide interactive log visualization.

VolUtility

Web App for Volatility framework