NodyHub

Awesome-Hacking

A collection of various awesome lists for hackers, pentesters and security researchers

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

wuzz

Interactive cli tool for HTTP inspection

mailcow-dockerized

mailcow: dockerized - 🐮 + 🐋 = 💕

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

testssl.sh

Testing TLS/SSL encryption anywhere on any port

curlconverter

Transpile curl commands into Python, JavaScript and 27 other languages

aquatone

A Tool for Domain Flyovers

Red-Team-Infrastructure-Wiki

Wiki to collect Red Team infrastructure hardening resources

the-backdoor-factory

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

InfoSec-Black-Friday

All the deals for InfoSec related software/tools this Black Friday

awesome-social-engineering

A curated list of awesome social engineering resources.

Checklists

Red Teaming & Pentesting checklists for various engagements

security-research-pocs

Proof-of-concept codes created as part of security research done by Google Security Team.

BDFProxy

Patch Binaries via MITM: BackdoorFactory + mitmProxy.

hashview-old

A web front-end for password cracking and analytics

ActiveScanPlusPlus

ActiveScan++ Burp Suite Plugin

multibootusb

A collection of GRUB files and scripts that will allow you to create a pendrive capable of booting different ISO files

ground-control

A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

BEWGor

Bull's Eye Wordlist Generator - Does your password rely on predictable patterns of accessible info?

egressbuster

Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.

pyshell

PyShell makes interacting with web-based command injection less painful, emulating the feel of an interactive shell as much as possible.

WebLogicPasswordDecryptor

PowerShell script and Java code to decrypt WebLogic passwords

research

Bug Bounty writeups, Vulnerability Research, Tutorials, Tips&Tricks

crt.sh

(Unofficial) Python API for https://crt.sh

yataf

yataf extracts secrets and paths from files or urls - its best used against javascript files

openai

🤖 Go package and CLI for OpenAI

passwds-ninja-web

Pronounceable Password Generator website

hashview-agent

Remote agent used for processing distributed jobs

k8s-node-scheduling-examples