JustDoItBz

modern-unix

A collection of modern/faster/saner alternatives to common unix commands.

jolokia-exploitation-toolkit

jolokia-exploitation-toolkit

hackability

Probe a rendering engine for vulnerabilities and other features

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

pr0cks-py

python script setting up a transparent proxy to forward all TCP and DNS traffic through a SOCKS / SOCKS5 or HTTP(CONNECT) proxy using iptables -j REDIRECT target

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

mini-blockchain

A simple very little blockchain, just for learning.

evilize

Use md5-collisions to make evil executables looking like a good one.

security-research

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

webwrap

🌯 Give me a web shell, I'll give you a terminal.

gaku

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

blackboxprotobuf

Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.

DonPAPI

Dumping DPAPI credz remotely

penglab

🐧 Abuse of Google Colab for cracking hashes.

aiodnsbrute

Python 3.5+ DNS asynchronous brute force utility

GHunt

🕵️‍♂️ Offensive Google framework.

CVE-2021-4034

CVE-2021-4034 1day

getsecrets

Find sensitive entries from the list of js/json

dnsperftest

DNS Performance test

karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

Apache-HTTP-Fuzzing

metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

SecretFinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

Fuzzing101

A GitHub Security Lab initiative https://securitylab.github.com/

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

wait-for-it

Pure bash script to test and wait on the availability of a TCP host and port

fresh-resolvers

List of fresh DNS resolvers updated daily

KARMA-DDoS

DDoS Script (DDoS Panel) with Multiple Bypass ( Cloudflare UAM,CAPTCHA,BFM,NOSEC / DDoS Guard / Google Shield / V Shield / Amazon / etc.. )

Echo-Server

REST Server Tests (Echo-Server) API / Docker / Kubernetes / Helm