alexlauerman

UpdateToken

Burp extension to use updated token values, such as a bearer token

ms10-070CheckPatch

Check for .net padding oracle patch

IncrementMePlease

Burp extension to increment a parameter in each active scan request

BurpExtensions

A list of burp extensions, although this has fallen very out of date.

EmptyBurpExtension

Example Burp extension to help get IntelliJ IDEA setup for Burp extension development

AndroidSourceScout

Android Security Static Analysis Tool for Android Studio

Scanners-Box

The toolbox of open source scanners(a.k.a scanbox) - 安全行业从业者自研开源扫描器合辑

begin-personal-website

Begin app

burp-suite-software-version-checks

Burp extension to passively scan for applications revealing software version numbers

fridump

A universal memory dumper using Frida

GitTools

A repository with 3 tools for pwn'ing websites with .git repositories available

IIS-ShortName-Scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

lair

Lair is a reactive attack collaboration framework and web application built with meteor.

Lair-Browser-Scripts

Collection of small JavaScript functions and scripts that can be used in the browser to interact with Lair

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

phishery

An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities

scripts

Various Small Scripts

SecLists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

ssh-phone-home

Pentest dropbox setup scripts for Kali Linux

the-backdoor-factory

Patch PE, ELF, Mach-O binaries with shellcode

community-scripts

A collection of ZAP scripts provided by the community - pull requests very welcome!

fuzz.txt

Potentially dangerous files

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

home-assistant.io

:blue_book: Home Assistant User documentation

kc-infosec

KC Infosec

recon-dradis

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.