TartarusLabs

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

Awesome-Fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

Veil

Veil 3.1.X (Check version info in Veil at runtime)

Cobra

Source Code Security Audit (源代码安全审计)

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

openvas-scanner

This repository contains the scanner component for Greenbone Community Edition.

ScareCrow

ScareCrow - Payload creation framework designed around EDR bypass.

kiterunner

Contextual Content Discovery Tool

gospider

Gospider - Fast web spider written in Go

nodejsscan

nodejsscan is a static security code scanner for Node.js applications.

windows-syscalls

Windows System Call Tables (NT/2000/XP/2003/Vista/7/8/10/11)

GraphQLmap

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

Android-InsecureBankv2

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

DotNetToJScript

A tool to create a JScript file which loads a .NET v2 assembly from memory.

DarkLoadLibrary

LoadLibrary for offensive operations

Cronos-Rootkit

Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.

gym-malware

java-deserialization-exploits

A collection of curated Java Deserialization Exploits

process_doppelganging

My implementation of enSilo's Process Doppelganging (PE injection technique)

afl-cov

Produce code coverage results with gcov from afl-fuzz test cases

Generic-University

Vulnerable API

apkinfector

Advanced Android AV Evasion Tool Written In Python 3 that can Embed/Bind meterpreter APK to any Legitimate APK

Shellcoding

Shellcoding utilities

osmedeus-base

Build your own reconnaissance system with Osmedeus Next Generation

CACTUSTORCH

CACTUSTORCH: Payload Generation for Adversary Simulations

Coyote

Coyote is a standalone C# post-exploitation implant for maintaining access to compromised Windows infrastructure during red team engagements using DNS tunneling.

Expeditus

Expeditus is a loader that executes shellcode on a target Windows system. It combines several offensive techniques in order to attempt to do this with some level of stealth.

Crypto-Tricks

This repo is a collection of proof-of-concepts, examples, essays and experiments in cryptography, cryptanalysis, steganography and covert channels that I originally wrote in 2015.

Burp-Request-Signer

Burp extension to sign Payment Gateway API requests by calculating a variation of a HMAC-SHA512 and adding it to the request.