Jack Neo's repositories
Awesome-Asset-Discovery
List of Awesome Asset Discovery Resources
beagle
Python tool to identify null sessions within an environment
blackhat-arsenal-tools
Official Black Hat Arsenal Security Tools Repository
blog_os
Writing an OS in Rust
can-i-take-over-xyz
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
ctf
CTF write-ups by PDKT team with English and Indonesian language
CVEs
A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.
ffuf
Fast web fuzzer written in Go
fuxploider
File upload vulnerability scanner and exploitation tool.
Fuzzing
Fuzzing Payloads to Assist in Web Application Testing.
impacket
Impacket is a collection of Python classes for working with network protocols.
Internal-Pentest-Playbook
Internal Network Penetration Test Playbook
LeakLooker
Find open databases with Shodan
linux-smart-enumeration
Linux enumeration tool for pentesting and CTFs with verbosity levels
MobileApp-Pentest-Cheatsheet
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
msf-auxiliarys
My collection of metasploit auxiliary post-modules
nishang
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
pentest-guide
Penetration tests cases, resources and guidelines.
php_bugs
PHP代码审计分段讲解
project-black
Pentest/BugBounty progress control with scanning modules
sic
A tool to perform Sequential Import Chaining
sqlinjection-training-app
A simple PHP application to learn SQL Injection detection and exploitation techniques.
svg-cheatsheet
A cheatsheet for exploiting server-side SVG processors.
the-book-of-secret-knowledge
A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
ThreatHunting
An informational repo about hunting for adversaries in your IT environment.
truffleHog
Searches through git repositories for high entropy strings and secrets, digging deep into commit history
userrecon
Find usernames across over 75 social networks