Beast code in Giters

Sup4ch0k3's starred repositories

Awesome-Hacking

A collection of various awesome lists for hackers, pentesters and security researchers

CC0-1.083458 38400

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Language:GoMIT20154 236 2384

PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Language:C#NOASSERTION15860 219 184

XSStrike

Most advanced XSS scanner.

Language:PythonGPL-3.013210 273 286

GTFOBins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

Language:HTMLGPL-3.010706 144 47

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Language:JavaScriptMIT9082 198 1518

gitrob

Reconnaissance tool for GitHub organizations

Language:GoMIT5907 1540

DevSecOps

Ultimate DevSecOps library

MIT5685 158 6

DefaultCreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

Language:PythonMIT5572 87 16

Cheatsheet-God

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

4868 240 17

payloads

Git All the Payloads! A collection of web attack payloads.

Language:ShellGPL-3.03603 198 5

Java-Deserialization-Cheat-Sheet

The cheat sheet about Java Deserialization vulnerabilities

3022 138 8

fuzz.txt

Potentially dangerous files

WTFPL2861 85 15

Gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

Language:PythonMIT2817 22 16

PCAPdroid

No-root network monitor, firewall and PCAP dumper for Android

Language:JavaGPL-3.02283 44 347

no-defender

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

GPL-3.01857 19 7

medusa

Binary instrumentation framework based on FRIDA

Language:PythonGPL-3.01547 44 44

wsMemShell

WebSocket 内存马/Webshell，一种新型内存马/WebShell技术

Language:Java1400 23 17

RemotePotato0

Windows Privilege Escalation from User to Domain Admin.

Language:CMIT1319 32 9

SharPyShell

SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications

Language:PythonGPL-3.0904 18 14

HackerPermKeeper

Linux权限维持

Language:PythonMIT646 5 2

o-mvll

:electron: O-MVLL is a LLVM-based obfuscator for native code (Android & iOS)

Language:C++Apache-2.0610 19 26

binder-trace

Binder Trace is a tool for intercepting and parsing Android Binder messages. Think of it as "Wireshark for Binder".

Language:PythonMIT559 21 22

aws-security-assessment-solution

An AWS tool to help you create a point in time assessment of your AWS account using Prowler.

Language:PythonApache-2.0508 18 15

cmd.jsp

A super small jsp webshell with file upload capabilities.

Language:JavaGPL-3.0287 150

Open-Source-Information-Leakage

开源项目信息泄露笔记

GPL-3.0276 2 1

R3d-Buck3T

Penetration Testing, Vulnerability Assessment and Red Team Learning

Language:SCSS133 12 1

Brutal_SSH

Brutal SSH: SSH Login brute force, scan for vulnerable version and 0 day exploit (under development)

Language:PythonMIT82 50

codeql-agent-extension

:pick: An extension for Visual Studio Code that simplifies CodeQL usage and executes code scanning automatically.

Language:TypeScriptNOASSERTION23 1 3

tetctf2021

tetctf2020_amf_writeups

Language:Python2300