SSA111

rembg

Rembg is a tool to remove images background

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

pspy

Monitor linux processes without root permissions

kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

OSCP

OSCP Cheat Sheet

IOSSecuritySuite

iOS platform security & anti-tampering Swift library

AzureAD-Attack-Defense

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

Snaffler

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

PowerShdll

Run PowerShell with rundll32. Bypass software restrictions.

noseyparker

Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.

flutter_smooth

Achieve ~60 FPS, no matter how heavy the tree is to build/layout

Invoke-TheHash

PowerShell Pass The Hash Utils

Awesome-CloudSec-Labs

Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.

legitify

Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets

NetworkNightmare

Network Pentesting Mindmap

AWSome-Pentesting

My cheatsheet notes to pentest AWS infrastructure

packj

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

LKWA

Lesser Known Web Attack Lab

lorsrf

Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load :artificial_satellite: :crab:

threat-modeling-training

Segment's Threat Modeling training for our engineers

ntpescape

NTP Exfiltration Tool

active-directory-pentest

plague

Default Detections for EDR

OSWP

#cheat sheet for OSWP

VOODOO

Man in the Browser Framework

macos-ttps-yara

A ruleset to find potentially malicious code in macOS malware samples

Okta_Watering_Hole

Next Generation Phishing Tool For Internal / Red Teams

CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV

Exploit for CVE-2023-38571

Forklift_LPE

Vulnerability Description of CVE-2020-15349

VivoPayEncryption

Source code and demo of the encryption used in VivoPay to store and backup wallets