SpeTr0x

Cronos

PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.

Sekiryu

Comprehensive toolkit for Ghidra headless.

ExploitLeakedHandle

Identify and exploit leaked handles for local privilege escalation.

bootlicker

A generic UEFI bootkit used to achieve initial usermode execution. It works with modifications.

dindocker

Play around with your own cluster nodes using docker containers.

Masscan-burp-extension

Backup-Finder

A burp suite extension that reviews backup, old, temporary and unreferenced files on web server for sensitive information (OWASP WSTG-CONF-04, OTG-CONFIG-004)

wifiphisher

The Rogue Access Point Framework

bugcrowd_university

Open source education content for the researcher community

hacktronian

All in One Hacking Tool for Linux & Android

Photon

Incredibly fast crawler designed for OSINT.

gitleaks

Protect and discover secrets using Gitleaks 🔑

003Recon

Some tools to automate recon - 003random

h1-212-ctf-solutions

A collection of the solutions people wrote for the H1-212 Capture The Flag event

research

Bug Bounty writeups, Vulnerability Research, Tutorials, Tips&Tricks

book

Crypto 101, the introductory book on cryptography.

Tiny-URL-Fuzzer

A tiny and cute URL fuzzer

V3n0M-Scanner

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

pixiewps

An offline Wi-Fi Protected Setup brute-force utility

xsshunter

The XSS Hunter service - a portable version of XSSHunter.com

reflector

Burp plugin able to find reflected XSS on page in real-time while browsing on site

ActiveScanPlusPlus

ActiveScan++ Burp Suite Plugin

CSRFT

A lightweight CSRF Toolkit for easy Proof of concept

Sublist3r

Fast subdomains enumeration tool for penetration testers

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

Automated-XSS-Finder

Automated XSS Finder

test111

IIS_exploit

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.