Beast code in Giters

Nehti's starred repositories

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

21201 1172 37

radare2

UNIX-like reverse engineering framework and command-line toolset

Language:CLGPL-3.020190 492 8424

mimikatz

A little tool to play with Windows security

Language:C19161 919 383

Sublist3r

Fast subdomains enumeration tool for penetration testers

Language:PythonGPL-2.09587 231 216

wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

Language:RubyNOASSERTION8445 269 1439

WebGoat

WebGoat is a deliberately insecure application

Language:JavaScriptNOASSERTION6784 210 690

tbhm

The Bug Hunters Methodology

3846 275 10

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

3676 241 8

payloads

Git All the Payloads! A collection of web attack payloads.

Language:ShellGPL-3.03582 197 5

H5SC

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

Language:JavaScriptMPL-2.02826 153 9

HTTPLeaks

HTTPLeaks - All possible ways, a website can leak HTTP requests

Language:HTMLBSD-2-Clause1953 91 10

HackVault

A container repository for my public web hacks!

Language:JavaScript1918 84 2

FLIRTDB

A community driven collection of IDA FLIRT signature files

Language:Max1187 88 7

sleepy-puppy

Sleepy Puppy XSS Payload Management Framework

Language:JavaScriptApache-2.01028 380 15

PrivEsc

A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

Language:C954 55 1

ElevateKit

The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.

Language:PowerShell878 320

pcc

PHP Secure Configuration Checker

Language:PHPBSD-3-Clause813 58 16

security-cheatsheets

A collection of cheatsheets for various infosec tools and topics.

803 108 1

xss_payloads

Exploitation for XSS

Language:PHP696 42 1

backslash-powered-scanner

Finds unknown classes of injection vulnerabilities

Language:JavaNOASSERTION625 29 21

jsprime

a javascript static security analysis tool

Language:JavaScriptNOASSERTION585 43 24

PoCs

Proof of Concepts for CVE-2016–3714

Language:Shell496 300

PoC

Various PoCs

Language:Python486 55 8

MCIR

The Magical Code Injection Rainbow! MCIR is a framework for building configurable vulnerability testbeds. MCIR is also a collection of configurable vulnerability testbeds.

Language:PHPGPL-3.0436 46 5